One of my clients recently had a case which I am explaining below and if you are stuck in such similar situation, here is what to do.
Note: Due to attorney-client privilege, I cannot disclose complete case details or identify the actual parties involved. However, I am sharing the essential facts and legal approach so that if you find yourself in a similar situation, you can understand the available solutions and legal remedies.
TL;DR: Banks cannot deduct money from your account without your clear and informed consent. An unauthorized deduction for an insurance policy you never opted for is both a banking irregularity and a potential deficiency in service under the Consumer Protection Act. You have the right to demand an immediate refund and cancel any such policy within the free-look period.
A young professional from Nagpur — let's call him Arjun Mehta — walked into a branch of HDFC Bank in the Dharampeth locality to open a savings account. Routine paperwork, Aadhaar verification, all done. Two days later, on the morning of 12 March 2025, he checked his account on the bank's mobile app. Something was off. A debit of Rs. 1,000. The transaction description read, "Transfer to 39436648754 HDFC ERGO GENERAL INSURANCE CYBER VAULT INSURANCE."
He hadn't bought any insurance. Never clicked a checkbox. Didn't authorize a thing. His calls to the branch manager went in circles. The first lawyer he spoke to told him the amount was too small to fight. Frustrated, he approached the Chamber of Advocate Sudhir Rao. The office immediately recognized this as a classic case of an unauthorized add-on product being pushed through during account opening — a practice sadly common in retail banking. Advocate Sudhir Rao and his office drafted a legal notice under the Consumer Protection Act, flagged the Reserve Bank of India's master circular on "Fair Practices Code," and demanded a refund with compensation. The bank reversed the amount within 10 days and paid Rs. 5,000 as compensation for the harassment. The client didn't have to step into a consumer forum at all — the notice itself did the job. Expertise in banking and consumer law made all the difference.
Key Facts of the Case
- Arjun Mehta opened a savings account with HDFC Bank, Nagpur branch, on 10 March 2025.
- On 12 March 2025, Rs. 1,000 was debited without his knowledge or consent.
- The transaction was labelled as a premium for "HDFC ERGO General Insurance — Cyber Vault Insurance."
- No product disclosure, no consent form, no Aadhaar-based OTP verification for this insurance was provided.
- Arjun did not sign any proposal form for a cyber insurance policy, nor was he given a policy document at the time of opening the account.
- The bank's mobile app (similar to YONO) showed the transaction as a "transfer" to the insurance company.
- A legal notice was sent citing deficiency in service and violation of RBI's Fair Practices Code.
- The bank refunded the full amount plus compensation within 10 days of receiving the notice.
The Direct Legal Answer
Why did the bank deduct this money?
Banks often pre-select insurance products during account opening — checkboxes buried in fine print, pre-ticked defaults, or even verbal "suggestions" that sound mandatory. The deduction happens when a bank acts as a corporate agent for an insurer and debits the premium without your active, informed consent. Make no mistake: this is not a genuine mistake in most cases; it's a designed add-on sale.
Can I demand a refund?
Absolutely. The Reserve Bank of India's Master Circular on Customer Service (2015) and the Fair Practices Code make it clear that no auto-debit can be processed without prior written or authenticated electronic mandate from the customer. You never gave that mandate. The Consumer Protection Act, 2019 treats this as an unfair trade practice and a clear deficiency in service. You can demand a full refund, cancellation of the policy, and compensation for mental agony.
Advice in Such Cases
Don't let the small amount fool you. The principle matters — and banks settle fast when they know you're serious. Here's what you should do immediately.
Consult with Lawyer: The very basic and important step to start is talk to Lawyer / advocate. You should not hesitate in paying his consultation fee i.e. might be in range of Rs. 10,000 to 50,000 depends case to case. He is helping you in this situation to come out. He is expert in the domain and can help you explain the procedure which you might have never explored. A good lawyer can get the issues resolved much faster than you think.
Send a formal email to the bank's nodal officer and grievance redressal department, attaching proof of the unauthorized debit. Follow up with a legal notice if the bank stalls. Consumer complaints in such matters typically involve domain-specific nuances like the RBI's auto-debit mandate rules and the Insurance Regulatory and Development Authority's (IRDAI) guidelines on point-of-sale insurance — nuances a general practitioner might overlook.
Applicable Sections of Law
- Section 2(11) of the Consumer Protection Act, 2019 — defines "deficiency in service," which covers unauthorized debits.
- Section 10 of the Consumer Protection Act, 2019 — provides for filing a complaint before the District Consumer Disputes Redressal Commission when the value of goods or services paid as consideration does not exceed Rs. 1 crore.
- RBI Master Circular on Fair Practices Code (2015) — mandates that banks cannot effect any debit without prior express consent from the customer.
- IRDAI Master Circular on Point of Sale (POS) Persons (2017) — requires that a POS person must obtain a signed proposal form and provide a policy document before collecting premium.
Punishment and Penalties
This is a civil matter under the Consumer Protection Act, not a criminal offence under the BNS. There is no arrest or imprisonment involved. However, if the unauthorized deduction is proven to be part of a systemic fraudulent practice, it could attract criminal liability for cheating under Section 318 BNS. But that is rare in individual cases. The usual remedy is a refund with compensation and costs awarded by the consumer forum.
Jurisdiction — Where to File the Case
For consumer complaints, the District Consumer Disputes Redressal Commission (DCDRC) in the district where the bank branch is located has jurisdiction. For a debit from an account in Nagpur's Dharampeth branch, you would file before the Nagpur DCDRC. The same applies if you opt for a civil suit — the court where the cause of action arose (the bank branch) will have territorial jurisdiction. Filing in the wrong forum wastes time, so confirm the correct consumer commission before proceeding.
Limitation Period
Under the Consumer Protection Act, 2019, a complaint must be filed within two years from the date on which the cause of action arose. For an unauthorized debit, that clock starts the day the debit appears in your statement. Missing this two-year window is fatal — though the consumer commission can condone a delay of up to two additional months if you show sufficient cause. Best to act fast.
Interim Reliefs Available
In a consumer complaint, you can seek an interim order directing the bank to reverse the debit pending final hearing. While consumer forums do not routinely grant interim relief, in cases where the amount is small and the violation is clear (like a no-consent deduction), the commission may direct the bank to provisionally credit the amount. In a civil suit, you can apply for a temporary injunction under Order 39 Rule 1 of the CPC, restraining the bank from debiting further unauthorized amounts — but for Rs. 1,000, a consumer forum is far more practical.
If You Are the Victim
- Immediately take a screenshot of the transaction and the account statement showing the debit.
- Check if the bank sent you any SMS or email about the insurance — if not, that's further proof of no consent.
- Call the bank's customer care and raise a formal complaint. Note the complaint reference number and the date.
- Visit the branch and ask for a written explanation and a copy of any mandate you allegedly signed.
- Do NOT cancel the policy yourself through the insurer's portal without first getting a written confirmation from the bank that the full premium will be refunded. Cancelling through the app may trigger a "free-look cancellation" with possible deduction of charges, which you shouldn't bear.
Documents You Must Keep Ready
- Bank account statement showing the unauthorized debit
- Screenshot of the transaction description from the bank's mobile app
- A copy of the bank's reply (if any) to your complaint
- Proof of identity and address (Aadhaar, PAN)
- All correspondence with the bank (emails, complaint reference numbers)
- The account opening form — to show that no insurance product was signed for
- Any SMS or email notifications from the bank or insurer regarding the policy
- Affidavit of the account holder stating no consent was given
What Evidence Is Required?
- Primary evidence: your sworn testimony in the form of an affidavit stating you never authorized the debit.
- Secondary evidence: the bank statement, mobile app screenshot, and the absence of any signed proposal form or OTP-based consent.
- Documentary evidence: the bank's own records showing they cannot produce a signed mandate from you.
- Expert testimony: not usually needed, but an expert opinion on banking compliance can strengthen the case if the bank insists the deduction was valid.
- Circumstantial evidence: any pattern of similar unauthorized deductions from other customers of the same branch could be presented as additional proof of unfair trade practice.
How Courts Typically Approach Such Cases
Consumer forums are generally sympathetic to the individual in unauthorized-debit cases. The burden of proof shifts quickly to the bank: the moment you show a screenshot of an unexplained debit, the bank must produce the written or authenticated electronic mandate you allegedly gave. In the vast majority of such cases, the bank fails to produce it, and the forum awards a refund with compensation — typically Rs. 5,000 to Rs. 25,000 depending on harassment and litigation costs. The forums also frequently impose costs on the bank for wasting the consumer's time when the debit was clearly unauthorized. Banks know this, which is why they often settle before the first hearing.
Timeline of Legal Process
- Step 1 — Internal complaint to bank: 1–2 weeks. Most banks resolve this quickly if you escalate to the nodal officer.
- Step 2 — Legal notice to the bank: 1 week to draft and send. The bank gets 15 days to respond.
- Step 3 — Filing consumer complaint before DCDRC: 2–4 weeks to prepare and file the complaint.
- Step 4 — First hearing: Usually within 30–45 days of filing. The commission issues notice to the bank.
- Step 5 — Bank's written version: 30–45 days after notice.
- Step 6 — Evidence and arguments: 2–4 hearings spread over 3–6 months.
- Step 7 — Final judgment: Typically 6–12 months from the date of filing for simple cases.
- Step 8 — Appeal (if any): 2–6 months in the State Commission.
In Arjun's case, the matter was resolved at Step 3 itself — the formal legal notice. The bank refunded the amount within 10 days.
Understanding the Costs
The total cost of a matter like this varies significantly from one case to the next — it depends on the complexity of the dispute, the forum involved, the number of hearings, and the specific facts of your situation. There is no single fixed figure that applies to everyone.
A professional advocate can give you an accurate estimate only after reviewing all your facts and documents in a consultation.
Can the Matter Be Settled Out of Court?
Yes — and it often is. In cases like Arjun's, a well-drafted legal notice under the Consumer Protection Act is frequently enough to make the bank reverse the deduction and pay compensation. Banks do not want the adverse publicity of a consumer forum order. If the matter has already been filed, the consumer commission may refer the parties to mediation or a Lok Adalat. Settlement works well here because the bank admits no liability but pays the refund and a modest compensation. Sign a full and final settlement deed before accepting the money, and make sure it does not bar you from raising similar issues in the future.
Common Mistakes People Make
- Waiting too long to act. The free-look period for insurance is usually 15–30 days from receipt of the policy document. Delay beyond that risks losing the automatic refund window.
- Calling the insurer directly and cancelling the policy via the app — the insurer may deduct charges for the days the policy was active, and you'll lose the right to demand a full refund from the bank.
- Ignoring the problem because the amount is small. That teaches banks they can get away with it. Filing a complaint sets a deterrent.
- Engaging a lawyer who does not regularly handle banking or consumer cases. The procedural and evidentiary nuances — such as RBI's auto-debit mandate rules, IRDAI's point-of-sale insurance guidelines, and the specific format for consumer complaints — are often missed by a general practitioner, which can weaken your case or delay resolution.
- Posting on social media before exhausting official remedies. This can harm your legal position if the bank later argues that you sought "public pressure" rather than a genuine resolution.
- Destroying the bank statement or app screenshot. That's your primary evidence. Keep digital and physical copies.
FAQs People Normally Have
What is a free-look period in insurance?
It's a 15–30 day window from the date you receive the policy document, during which you can cancel the policy and get a full refund of the premium paid. The insurer can only deduct a nominal stamp duty and medical examination charges, if any. Use this period aggressively if you discover an unauthorized policy.
Can the bank legally deduct money without my signature?
No. Under RBI rules, any auto-debit must be based on a clear written or electronic mandate that you have authenticated. A pre-ticked checkbox, a buried fine-print clause, or a verbal "suggestion" from a bank employee does not count as valid consent. If the bank cannot produce your signed mandate, the deduction is unauthorized.
What if the bank says I agreed during account opening?
Ask the bank to provide a copy of the application form you signed, showing the insurance checkbox was ticked by you — not pre-ticked. If it was pre-ticked, or if the signature is not on the insurance proposal form itself, the consent is invalid. Insist on seeing the specific proposal form for the insurance policy, not the general account opening form.
Can I file a police complaint for cheating under the BNS?
Technically yes, if the deduction was fraudulent and part of a larger scheme. However, for a single debit of Rs. 1,000, the police is unlikely to register an FIR unless there is a pattern involving many customers. The consumer forum is the fastest and most effective remedy for individual cases.
How long do I have to file a consumer complaint?
Two years from the date of the unauthorized deduction. That's the limitation period under the Consumer Protection Act. Don't delay — the longer you wait, the harder it becomes to prove that the debit was without consent.
This article is general legal information, not legal advice. Consult a qualified advocate about your specific situation.
Advocate Sudhir Rao, Supreme Court of India