Today, digital payments have replaced the use of physical debit and credit cards in the payments industry. Despite all the technological resources that work in favor of the digital payment value chain, cyber crimes are still finding their way. And gradually, they become dangerous threats for the industry participants. Thus, to secure the digital payments ecosystem, the National Payments Corporation of India (NPCI) has released guidelines enabling the adoption of Unified Payments Interface (UPI) to merchants and all third-party app providers. This allows the integrated management of online payments under one umbrella. The purpose of this document is to highlight the controls as per the new guidelines released by National Payment Corporation of India (NPCI) on annual security audit for all UPI member banks engaging with TPAPs.