The National Payments Corporation of India has ordered fintech firms to stop using UPI APIs for unauthorised purposes, such as user authentication. This violates NPCI and RBI guidelines, and firms must comply or face penalties or cessation of UPI services.