Mandatory API Usage Audits

Banks and PSPs must undergo annual CERT-IN approved audits on UPI APIs, encryption, security, and infrastructure. Audit reports and corrective plans are submitted to NPCI to ensure integrity.