If you are stuck in such a situation, here is what to do.
Mr. Verma recently checked his elderly mother's bank account and was shocked to find that an amount of ₹100 was being debited every day. The debits were being made via a UPI AutoPay mandate to a digital savings application called "DigiSave Gold." Neither he nor his mother recalled authorizing this recurring payment. This had been going on for over a month, leading to a loss of more than ₹3,000. Mr. Verma immediately planned to disable the mandate but was unsure how to recover the funds already deducted and how to determine when and by whom this AutoPay was set up.
Advice in such cases
If you find yourself in a similar predicament with unauthorized or accidental auto-debits, here are the immediate steps you should take:
- Disable the Mandate Immediately: The first step is to stop further financial loss. Go to your UPI-enabled app (like Google Pay, PhonePe, Paytm, or your bank's app), find the "AutoPay" or "Mandates" section, locate the specific mandate, and cancel or disable it.
- Contact the Merchant/App: Get in touch with the customer support of the application (in this case, "DigiSave Gold"). Explain the situation and request a full refund, stating that the mandate was not authorized. Keep a record of all communication.
- Inform Your Bank: Notify your bank about the unauthorized transactions. They can provide details about the mandate and may assist in the dispute resolution process. File a formal complaint with the bank's grievance redressal cell.
- File a Complaint with the RBI Ombudsman: If you do not receive a satisfactory response from the bank or the app within 30 days, you can escalate the matter by filing a complaint with the Reserve Bank of India's Ombudsman for Digital Transactions.
- **Consult with Lawyer**: The very basic and important step to start is talk to Lawyer / advocate. You should not hesitate in paying his consultation fee i.e. might be in range of Rs. 10,000 to 50,000 depends case to case. He is helping you in this situation of come out. He is expert in the domain and can help you explain the procedure which you might have never explored. A good lawyer can get the issues resolved much faster than you think.
Applicable Sections of Law
Several legal provisions can be invoked in such situations:
- Payment and Settlement Systems Act, 2007: This Act, along with circulars issued by the RBI, governs all electronic and digital payment systems in India. The RBI has laid down a specific framework for the processing of e-mandates for recurring transactions, which includes requirements for Additional Factor of Authentication (AFA) and pre-debit notifications. Any deviation from this framework can be challenged.
- Consumer Protection Act, 2019: The activation of an AutoPay mandate without explicit and informed consent constitutes a "deficiency in service" by the app provider and potentially the bank. You can file a complaint in the appropriate consumer commission seeking a refund, compensation for mental agony, and litigation costs.
- Information Technology Act, 2000: Section 43 of the IT Act provides for compensation if anyone accesses or downloads data from a computer system without permission, leading to wrongful loss. If the mandate was set up through unauthorized access to the user's device or account, this section is applicable.
- Bharatiya Nyaya Sanhita, 2023 (BNS): If there is evidence of fraudulent intent, such as the app being designed to trick users into setting up payments, a complaint can be filed under Section 316 of the BNS for cheating.
If you are the complainant
As the person who has discovered the issue and is acting on behalf of the victim (like Mr. Verma for his mother), your role is crucial. Follow these steps methodically:
- Document Everything: Take screenshots of the bank statements highlighting the debits, the UPI mandate page before and after cancellation, and any in-app information related to the saved gold or service.
- Communicate in Writing: Ensure all your communications with the app company and the bank are in writing (email is best) to create a paper trail. Clearly state your complaint and the resolution you seek.
- Follow the Hierarchy: Approach the company first, then the bank. If they fail to resolve the issue, proceed to the RBI Ombudsman or a consumer court. This structured approach is often required by regulatory bodies.
- **Consult with Lawyer**: The very basic and important step to start is talk to Lawyer / advocate. You should not hesitate in paying his consultation fee i.e. might be in range of Rs. 10,000 to 50,000 depends case to case. He is helping you in this situation of come out. He is expert in the domain and can help you explain the procedure which you might have never explored. A good lawyer can get the issues resolved much faster than you think.
If you are the victim
If you are the person whose account has been debited (like Mr. Verma's mother), it is important to take action, even if a family member is assisting you.
- Authorize Action: If someone else is handling the issue for you, provide them with a simple authority letter if required by the bank or other institutions.
- Secure Your Account: Change your UPI PIN and any other security credentials associated with your bank and payment apps. Review all active mandates and subscriptions.
- Be Involved in the Complaint: While a family member can help draft complaints, your signature or digital consent will be required for official filings with the bank, ombudsman, or courts.
- **Consult with Lawyer**: The very basic and important step to start is talk to Lawyer / advocate. You should not hesitate in paying his consultation fee i.e. might be in range of Rs. 10,000 to 50,000 depends case to case. He is helping you in this situation of come out. He is expert in the domain and can help you explain the procedure which you might have never explored. A good lawyer can get the issues resolved much faster than you think.
How the police behave in such cases
Approaching the police can have mixed results. For smaller amounts and cases that appear to be accidental or a service dispute, the police may be hesitant to file a First Information Report (FIR). They often perceive it as a civil matter and may direct you to the bank, the RBI Ombudsman, or a consumer court. However, if there is a clear indication of a widespread scam or organised fraud, the Cyber Crime Cell is the more appropriate authority. They are better equipped to investigate digital financial crimes, trace the flow of money, and identify the perpetrators behind the fraudulent app or service.
FAQs people normally have
Can I find out exactly who and when the AutoPay was enabled?
Your bank and the UPI platform (managed by NPCI) maintain logs. Upon filing a formal dispute, the bank can investigate and provide details on the date, time, and IP address from which the mandate was authorized. This can help determine if it was done from a known or unknown device.
What if the app company refuses to refund the money?
If the company is uncooperative, your next step is to escalate the complaint to your bank and then the RBI Ombudsman. The Ombudsman can issue a binding order to the bank or company to refund the amount if they find a violation of rules.
Is the money invested in the "gold savings" app lost forever?
Not necessarily. The money debited is likely converted into digital gold and held in your name within the app. Even if a refund is not processed, you should have the option to sell the accumulated digital gold and withdraw the proceeds to your bank account. Check the app's withdrawal or "sell" functionality.
What evidence is required?
To build a strong case for a refund and to pursue legal action, you must gather the following evidence:
- Bank Statements: A detailed statement from your bank clearly showing all the recurring auto-debits.
- Screenshots: Images of the UPI mandate section in your payment app, the transaction history within the merchant app, and any error messages.
- Communication Records: Copies of all emails, chat transcripts, or letters exchanged with the merchant's customer support and your bank's grievance cell.
- Complaint References: The ticket or reference numbers for all complaints filed with the company, bank, and RBI Ombudsman.
How long will the investigation take?
The timeline for resolution can vary significantly based on the channel you use:
- Merchant/Bank Level: Typically, they are expected to resolve complaints within 7 to 30 days.
- RBI Ombudsman: The process can take anywhere from 30 to 90 days, depending on the complexity of the case and the responsiveness of the involved parties.
- Consumer Court: Legal proceedings in a consumer court are more time-consuming and can take several months to over a year to reach a final decision.
- Police/Cyber Cell: Criminal investigations have no fixed timeline and depend entirely on the nature of the crime and the leads available to the investigators.
Advocate Sudhir Rao, Supreme Court of India