By Soumya Ranjan 
Stricter consent requirements for UPI numbers are introduced by the new UPI Rules, which go into effect on April 1 and guarantee improved security and smooth transactions.
In order to enhance interoperability and the user experience for UPI number-based payments, the National Payments Corporation of India (NPCI) has released an addendum to its earlier circular on the Numeric UPI ID resolution. UPI member banks, UPI apps, and third-party app providers (TPAPs) must comply with these changes, which go into effect on April 1, 2025.
Important adjustments to UPI number administration
The most recent directive, published under NPCI/UPI/OC-115E/2024-25, expands upon the 2021 guidelines and takes into account suggestions made at the July 2024 meeting of the UPI Steering Committee. The main goals are to guarantee transparency in user consent procedures, avoid mistakes caused by recycled mobile numbers, and expedite the processing of UPI numbers.
The main modifications are as follows:
Continual notifications of changes to mobile numbers
At least once a week, banks and PSP apps are required to update their databases using the Mobile Number Revocation List/Digital Intelligence Platform (MINRL/DIP).
By redistributing previously assigned numbers to new users, a process known as mobile number churn, this step seeks to reduce errors.
User consent for UPI number seeding
Before seeding or porting a UPI number, UPI apps must get the user’s express consent.
Users should be required to manually select the option to activate their UPI number as part of the consent mechanism’s opt-in choice by default.
The procedure must guarantee unobtrusive and transparent communication, steering clear of coercive or deceptive messaging.
Limitations on when consent is gathered
Before or during a transaction, users shouldn’t be asked for their consent.
Users should not be misled by any messaging pertaining to seeding or porting the UPI number into thinking that they will not be able to receive payments if they do nothing.
Deadline for compliance
By March 31, 2025, all UPI participants—banks, apps, and third-party providers—must put these modifications into effect. Enhancing security, preventing fraud, and improving the overall user experience for UPI-based transactions are the goals of the updated framework.