One of my clients recently had a case which I am explaining below and if you are stuck in such similar situation, here is what to do.
Note: Due to attorney-client privilege, I cannot disclose complete case details or identify the actual parties involved. However, I am sharing the essential facts and legal approach so that if you find yourself in a similar situation, you can understand the available solutions and legal remedies.
TL;DR: An autopay mandate cancellation done only in the payment app often does not reach the bank or the NPCI mandate registry, so the debit continues even after you get a confirmation email. You can recover the money through a written dispute with your bank, a complaint to the RBI Ombudsman, or a consumer complaint, and the strongest evidence is the revocation trail plus your bank statement. Waiting quietly for the next debit is the one thing that really hurts your case.
Rohan Gupta runs a small printing unit in Indore. In February 2024 he signed up for a free annual plan on a music streaming app, the kind that quietly turns into a paid subscription the day the free period ends. Payment was set up as a UPI AutoPay mandate through PhonePe, linked to his ICICI Bank savings account.
In August 2025 he decided he did not want it. He opened PhonePe, found the mandate, switched it off, and the confirmation email arrived within minutes. He assumed that was the end of it.
It wasn't.
The renewal date, in the first week of September, brought an SMS from ICICI Bank. Money had gone out. His bank account said paid. The app said the plan had expired. He checked the NPCI mandate page and found the mandate still sitting there, active.
Three weeks of the usual runaround followed. Chat support at the streaming app said the payment had not been credited to his account, so nothing could be refunded. The bank's helpline said the debit was authorised by a live mandate. A chargeback attempt through PhonePe came back as a template rejection.
He then approached the Chamber of Advocate Sudhir Rao. Advocate Sudhir Rao and his office built the complaint around the mandate revocation trail instead of the refund claim, and once the documentation was arranged properly the debit was reversed and the mandate closed. Advocate Sudhir Rao's familiarity with payment-mandate disputes and consumer procedure is what moved a stalled complaint to a result.
Key Facts of the Case
- The free plan converted to a paid subscription in February 2024, with payment routed through a UPI AutoPay mandate on PhonePe linked to an ICICI Bank account.
- The client switched off the mandate in the app in August 2025 and received a confirmation email the same day.
- The debit still happened on the renewal date in the first week of September 2025.
- The NPCI mandate page showed the mandate as active even after the app-level cancellation.
- The service provider refused a refund on the ground that the payment had never been credited against the subscription.
- The bank treated the debit as authorised because a live mandate existed in its records.
- The app-level chargeback was rejected with a standard reason, without examining the revocation email.
- Once the revocation trail and mandate records were presented properly, the debit was reversed and the mandate closed.
The Direct Legal Answer
Was the autopay mandate cancellation actually completed?
Probably not, and that is the whole problem. Switching off autopay inside a payment app tells the app to stop initiating the debit. It does not always push a revocation message to your bank or to the NPCI mandate registry. Until the bank or the mandate beneficiary formally revokes the registration, the mandate stays alive and the debit goes through. The confirmation email only proves you asked; it does not prove the mandate died.
Why was the money taken if the plan had already expired?
Because the debit came from the mandate, not from the subscription. The mandate is a standing instruction to your bank. Separately, the service provider may not credit the plan until the payment reconciles at its end. So you can end up in the strange position where the money left, the plan shows expired, and both sides point at each other.
Can the money be recovered?
Yes, usually. A written dispute to the bank, escalated to the RBI Ombudsman if unanswered, and a consumer complaint before the District Commission are the three working routes. A debit outside a valid mandate is money the bank was not entitled to pay out, and an uncredited payment for a service not delivered is a deficiency in service.
Advice in Such Cases
Consult with Lawyer: The very basic and important step to start is talk to Lawyer / advocate. You should not hesitate in paying his consultation fee i.e. might be in range of Rs. 10,000 to 50,000 depends case to case. He is helping you in this situation to come out. He is expert in the domain and can help you explain the procedure which you might have never explored. A good lawyer can get the issues resolved much faster than you think.
Put everything in writing and keep the timeline tight. A phone call to a helpline creates no record. A dated email to the bank's grievance officer, quoting your account number, the mandate and the debit reference number, is what a bank responds to. Keep it to a few lines. Attach the revocation confirmation and the statement page. Anything longer gets skimmed, and a skimmed complaint gets closed with a template reply.
What to Collect Before You Write Anything
These disputes are decided on the paper trail, not on who was more inconvenienced. Put the following in one folder — physical or on your phone — before the first email leaves your inbox.
- The revocation confirmation: the email, in-app notification or SMS showing the date you switched autopay off.
- A screenshot of the mandate screen taken on the day you check it, showing whether the mandate reads active or revoked.
- The bank statement page with the debit, including the reference number printed against it.
- The pre-debit notification, if one arrived. If none arrived, write that down and say so in the complaint.
- Ticket numbers from every chat and call, and the exact wording of the chargeback rejection.
If the confirmation email is gone, look for the app's notification history or your email's deleted items. Even an SMS saying "mandate updated" helps, because it dates the instruction. If nothing survives, you can still proceed on the bank's own records — you ask the bank, in writing, to produce the mandate registration details and the revocation log against your account. Banks do produce these when asked formally, and what they show often decides the case.
What If Your Autopay Mandate Cancellation Did Not Stop the Debit?
Then you escalate in writing, in order, and you do not skip a step. Skipping gets you sent back to the start.
- The bank's grievance officer. Not the helpline. Write to the grievance officer named on the bank's website, quote the account number and the debit reference, state that the mandate was revoked on a particular date, and ask for reversal. Ask for a complaint or acknowledgement number in the same email. Once that number exists, the clock starts. The bank is expected to reply within thirty days.
- The RBI Ombudsman. If there is no reply in thirty days, or the reply does not resolve it, you go to the Reserve Bank – Integrated Ombudsman Scheme, 2021 through the RBI's Complaint Management System portal. You have one year from the bank's reply, or from the date the thirty-day period lapsed. Filing is free and you can do it yourself.
- The consumer commission. A complaint before the District Commission under the Consumer Protection Act, 2019, filed through e-Daakhil, within two years of the cause of action. The filing fee depends on the value of the claim and is modest. Against the bank the case is that it debited without a valid mandate; against the service provider it is that money was taken for a service that was not delivered.
- The police or cyber crime route only if the mandate itself was created without your consent. That is a different situation from a cancellation that failed to register. Unauthorised mandate creation can attract cheating provisions of the Bharatiya Nyaya Sanhita, 2023 and the identity-theft provisions of the Information Technology Act, 2000. Report on the National Cyber Crime Reporting Portal or dial 1930. A failed cancellation on its own is usually a civil and regulatory matter, not a criminal one — I would not dress it up as fraud before the bank, because it weakens the part of your case that is actually strong.
One argument worth knowing about
Under the RBI's harmonised turnaround-time framework for failed transactions on authorised payment systems, money that leaves an account without reaching the beneficiary is supposed to be reversed within a prescribed period, with per-day compensation for the delay. The bank will say this was not a failed transaction at all, because a live mandate authorised it. That is exactly why the revocation trail matters. Once you show the mandate was revoked, the debit stops looking authorised, and the turnaround-time argument opens up. Whether it applies on your facts depends on the channel and on when the revocation was recorded, so treat it as an argument rather than a certainty.
How Long This Takes
Realistically: a few weeks for the bank to answer, one to three months at the Ombudsman if it goes that far, and considerably longer if it reaches a consumer commission. The money is usually recovered well before that — most reversals in these matters happen at the grievance-officer stage or shortly after the Ombudsman complaint is registered. What slows it down is silence. Every week you wait without writing makes it easier for the other side to say the delay shows you accepted the debit.
Frequently Asked Questions
Can I cancel a UPI AutoPay mandate at my bank instead of the app?
Yes, and it is the safer route. The registration sits with your bank, not with the app. Net banking usually has a mandate or standing-instruction section where you can see and revoke it, and a branch request gets you a stamped acknowledgement. Revoke there, then check the app again.
The app sent a cancellation confirmation. Is the app liable?
It is the first question everyone asks, and the answer is not clean. An app or payment aggregator operates through the bank and the mandate registry; whether it owes you anything directly depends on what its records show about forwarding the revocation. Your strongest claim is normally against your own bank, because that is the party that debited your account. This is also the point on which the facts are usually thinnest until you get the records.
Do I need a lawyer to file with the RBI Ombudsman?
No. The Ombudsman route is built for people to use directly, and it costs nothing. Plenty of people recover the debit without legal help. If you would rather have the complaint drafted and the escalation tracked, the chamber can take it up — but I would rather tell you the free route exists than have you pay for something you can do in an afternoon.
Can I claim more than the amount debited?
Sometimes. The Ombudsman can award compensation for the loss and, where the facts support it, for the harassment caused. The ceilings are set by the Scheme. Consumer commissions can award compensation for deficiency in service as well. On a single unauthorised debit of a few hundred rupees, the compensation element is usually small — the practical goal is getting the mandate closed so it does not repeat.
What if the mandate was created without my consent at all?
That is a different and more serious case. Preserve the SMS and the registration entry, report it on the cyber crime portal, and tell the bank in writing to treat it as an unauthorised mandate, not a cancelled one. Do not use the word "cancel" in that complaint, because it concedes that you set the mandate up.
Should I just close the bank account?
It stops the next debit, but it does not close the mandate registration in every record, and it can be read by the service provider as a payment default. Revoke first, get the revocation on record, then decide about the account.
What to Send the Chamber
If you want this looked at, send four things: the bank statement page showing the debit with its reference number, the revocation confirmation with its date, a screenshot of the current status of the mandate, and the reference number of any complaint you have already filed. Two lines of background is enough — when you set the mandate up, when you switched it off, and what the bank told you. You can send it through /contact-us or book a slot at /book. If the revocation was never recorded anywhere and the bank's mandate log is clean, there may be nothing to argue — I will tell you that instead of filing something that goes nowhere.
This article is general information about Indian law and how these complaints are usually handled. It is not legal advice on your own situation, and the outcome of any complaint turns on the record in that specific case.
Advocate Sudhir Rao, Supreme Court of India