Flow Release Notes | Version 3.6.3
This release note covers updates related to UPI AutoPay, eNACH Mandate, and Virtual Account APIs.
UPI Autopay
Release Date: 03-Apr-2025
Feature: Collect Request & TPV Support in Create Mandate API
Summary: Merchants can now initiate collect request-based mandates with optional Third-Party Verification (TPV). This provides an alternative to intent links for better control over mandate registrations.
New API Flags:
- is_collect_request – Mandatory parameter. Accepted values: true/false.
- is_tpv – Conditional mandatory parameter. If is_collect_request = true, this parameter must be provided. Accepted values: true/false.
Behaviour Changes:
- If is_collect_request = true, mandates are initiated via collect requests, and the following fields are mandatory:
- payer_details.name
- payer_details.virtual_address
- If is_collect_request = false, mandates are initiated via intent links.
- If is_tpv = true, the payer’s account number payer_details.account_no is required for validation along with payer_details.name & payer_details.virtual_address
- If is_tpv = false, payer_details.account_no must be null.
- The existing intent link flow remains unchanged for backward compatibility.
Feature: Introduction of redirect URL in Create Mandate API
Summary: Merchants can pass the redirection URL in the Create Mandate API & once we receive the terminal statues, user will be redirected to merchant provided URL.
New API Params:
- redirect_url - This is a optional parameter. Merchants can pass the redirection URL. Max support of characters are 2048.
{
"reference_id": "{{$randomUUID}}",
"consumer_urn": "{{consumer_urn}}",
"mandate_name": "TPV Testing",
"amount": 1.00,
"frequency": "daily",
"purpose_message": "TPV Testing",
"rule_type": "AFTER",
"amount_rule": "MAX",
"start_date": "2025-04-28",
"end_date": "2025-04-29",
"expiry_time": 10,
"default_amount": 1,
"is_managed_by_decentro": false,
"is_qr_requested": true,
"is_collect_request": false,
"is_tpv": true,
"payer_details": {
"name": "abc",
"virtual_address": "nihal@okhdfcbank",
"account_no": "50100425803737"
},
"generate_psp_uri": false,
"is_downpayment": true,
"redirect_url": "https://www.google.com",
"mandate_action_callback_subscriber_data": {
"url": "https://webhook.site/XXXX",
"method": "POST",
"headers": {
"content-type": "application/json"
}
}
}
Enach Mandate
Release Date: 03-Apr-2025
Feature: Introducing UIStreams for Mandate Registration
Summary: This release introduces UIStreams-based mandate registration, allowing merchants to choose between three different initiation flows.
Three different initiation flows supported:
- UIStreams with user details – User selects authentication mode only on the Decentro screen.
{
"reference_id": "{{$randomUUID}}",
"consumer_urn": "XXXX",
"user": {
"name": "somefirst somelast",
"account_number": "696410110006674",
"reference_number": "decentro-mandate",
"account_type": "SAVINGS",
"bank_code": "HDFC",
"email": "[email protected]",
"mobile": "9999999999",
"pan": "ABCDE1234F"
},
"start_date": "2025-04-03",
"end_date": "2030-07-30",
"amount": 10000.00,
"amount_rule": "fixed",
"category_code": "elec",
"frequency": "weekly",
"redirection_url": "https://google.com",
"uistream": true
}
- UIStreams without user details – User enters their details on the Decentro screen.
{
"reference_id": "{{$randomUUID}}",
"consumer_urn": "XXXX",
"start_date": "2025-04-03",
"end_date": "2030-07-30",
"amount": 10000.00,
"amount_rule": "fixed",
"category_code": "elec",
"frequency": "weekly",
"redirection_url": "https://google.com",
"uistream": true
}
- Direct Link – User is redirected directly to NPCI.
{
"reference_id" : "{{$randomUUID}}",
"consumer_urn": "{{consumer_urn}}",
"user" : {
"name" : "XXXX",
"account_number" : "XXXX",
"account_type" : "SAVINGS",
"reference_number" : "decentro-mandate",
"bank_code" : "CNRB"
},
"start_date" : "2025-04-20",
"end_date" : "2025-06-20",
"amount" : 200.00,
"amount_rule" : "fixed",
"category_code" : "elec",
"frequency" : "weekly",
"redirection_url" : "https://www.google.com",
"authentication_mode" : "DebitCard"
}
Feature: New Mandate Registration Callback Structure
Release Date: 03-Apr-2025
Summary: The callback structure has been updated to ensure consistency with new feature UIStreams.
- Updated Mandate Registration Callback Structure.
- Callback now includes a user block with collected user details.
- Optional fields like PAN, email, and mobile will be sent as null if not provided.
{
"decentro_txn_id": "CE96A1309D02456091C8B534A8FC820B",
"decentro_mandate_id": "5932",
"consumer_reference_number": null,
"user": {
"name": "trywrthrgf",
"account_number": "235234534",
"account_type": "CURRENT",
"bank_code": "SBIN",
"email": null,
"pan": null,
"mobile": null
},
"status": "ACTIVE",
"message": "Mandate successfully registered.",
"response_key": null
}
Name Validation with PAN on Create and Update Virtual Account API
- Name-PAN Validation Implemented: Decentro has introduced a name validation mechanism using PAN validation to ensure the Virtual Account holder's name matches the PAN record.
- During Virtual Account Creation: When name and PAN details are provided via the Create Virtual Account API, the system validates the entered name against the name fetched from the PAN.
- If the names match, the Virtual Account will be successfully created.
- If there is a mismatch, the Virtual Account creation will be rejected.
- During Virtual Account Update: The same validation logic applies to the Update Virtual Account API.
- If either the name or PAN is updated, a name validation check is triggered.
- The update will proceed only if the name matches the PAN record.
- API reference:
- Create Virtual Account = https://docs.decentro.tech/reference/virtual_accounts_api-create-a-virtual-account-v2
- Update Virtual Account = https://docs.decentro.tech/reference/update-virtual-account
"is_active" flag on Update Virtual Account API
- Activation Status via is_active Flag: Platforms can now activate or deactivate a Virtual Account by using the is_active flag in the request payload of Decentro’s Update Virtual Account API.
- Setting is_active to true will activate the Virtual Account.
- Setting it to false will deactivate the Virtual Account.
- API reference:
- Update Virtual Account = https://docs.decentro.tech/reference/update-virtual-account