Unauthorised Hard Inquiry? Bank Loan Complaint Guide

One of my clients recently had a case which I am explaining below and if you are stuck in such similar situation, here is what to do.

Note: Due to attorney-client privilege, I cannot disclose complete case details or identify the actual parties involved. However, I am sharing the essential facts and legal approach so that if you find yourself in a similar situation, you can understand the available solutions and legal remedies.

TL;DR: If a bank makes an unauthorised hard inquiry on your credit report after assuring you in writing that it would not, that is a deficiency in service and a breach of the bank's own representation. An RBI Ombudsman rejection does not close the matter. It usually means you now need the complaint framed properly, with documents, before a consumer commission. The written assurance is the single most valuable paper you hold.

Arjun Mehta's trouble began with a verification call that kept going to the wrong city. He was midway through a ₹2 lakh pre-approved loan application when the bank's representative stopped answering his questions about how the residence check would work. Arjun works from home in Indore. His employer's office sits in Hyderabad, and he travels there perhaps once a month, sometimes for a stretch. He told the representative this, more than once, on WhatsApp and on calls.

None of it registered. The representative pushed the residence verification to Hyderabad anyway and asked him to either approve it or supply a Hyderabad address where the check could be done. Arjun had no such address. When he went back to the branch manager, the manager agreed the file had been handled badly, pulled up the representative, and asked for a reprocessing in the same week. Arjun asked one specific question before agreeing: would another hard inquiry land on his credit report? The bank said no, in writing, over email.

Five days later, a second hard inquiry appeared. He walked away from the loan. The representative then asked him how he could possibly be employed if he "didn't have any idea" about the process, and accused him of filing wrong information. The Nodal Officer backed the bank. The RBI Ombudsman closed the complaint saying the evidence was insufficient.

We only have Arjun's side of this, and the bank's internal file may read differently. What he did have was the email, the WhatsApp thread and the credit report entry. He approached the Chamber of Advocate Sudhir Rao after the Ombudsman closure. Advocate Sudhir Rao and his office rebuilt the grievance as a documented deficiency in service rather than a complaint about staff behaviour, tied it directly to the bank's written assurance, and filed before the District Consumer Disputes Redressal Commission at Indore. Advocate Sudhir Rao's experience with banking and credit-reporting disputes, and with how commissions read a bank's own written assurance, is what moved the matter to a resolution in the client's favour.

Key Facts of the Case

• A pre-approved loan of ₹2 lakh was being processed with a private sector bank.
• The applicant worked from home in Indore and had only an occasional office presence in Hyderabad.
• The bank's representative redirected residence verification to Hyderabad and demanded either approval or a local address.
• The branch manager accepted the mishandling and arranged reprocessing within the same week.
• Before reprocessing, the bank confirmed by email that no fresh hard inquiry would be made on the credit report.
• A second hard inquiry appeared roughly five days later, contradicting that written assurance.
• The complaint to the Nodal Officer and then to the RBI Ombudsman both failed, the latter for insufficient evidence.
• Documents held: the email assurance, WhatsApp conversations, and the credit report showing both inquiries.

The Direct Legal Answer

Can a bank make a fresh unauthorised hard inquiry after promising in writing that it won't?

No. Once a bank puts that assurance in writing, it is bound by it. Making the inquiry anyway is a breach of its own representation and, in consumer law terms, a deficiency in service. The inquiry is not a neutral event. It stays on the report, it can shave points off a score, and it can affect the terms other lenders offer you.

Does the RBI Ombudsman's rejection end the matter?

No. The Integrated Ombudsman Scheme, 2021 is a free, bank-funded redress route, and it is not a court. Its award is generally limited to actual loss suffered, and a closure for insufficient evidence is a comment on how the complaint was presented, not a finding that the bank did nothing wrong. You can still go to a consumer commission on the same facts. The two routes are separate.

Can I get compensation for a wrong credit inquiry?

Possibly, and it depends on proof. You need to show the inquiry was made without your authority, that you suffered a consequence, and that you complained promptly.

Was This a Wrong Credit Inquiry? How the Law Looks at It

A hard inquiry is what a lender triggers when it pulls your full credit report because you have applied for credit. It is recorded, other lenders can see it, and several of them in a short window drag a score down. That is the whole reason a bank's promise not to make one is not small talk.

A soft inquiry is different. Your own check of your own report, or a lender's pre-approval screening, leaves no mark other lenders can see. If your report shows a hard inquiry you never asked for, you are looking at the first kind.

Consent is the hinge

Credit information is collected and shared under the Credit Information Companies (Regulation) Act, 2005 framework. It runs on consent: a credit institution is expected to have your authorisation before it pulls your report and reports your repayment behaviour, and the credit information companies are expected to keep that data accurate. A hard inquiry connected to an application you actually made is authorised. A second one run after you were told in writing it would not be run is not.

So there are usually two separate things to argue, and they are not the same argument. One is that your report now carries an entry that should not be there. The other is that the bank broke a representation it made to you. A bank defending the first will say the inquiry was a routine part of processing. The second is harder to answer, because you have its own email.

The written assurance does most of the work

Verbal assurances are close to useless in this kind of dispute. Anyone can deny a phone call. An email from the bank's own domain, dated, with a named sender, saying no fresh inquiry will be made, is a different animal. It converts a dispute about internal procedure into a straight comparison: here is what you said, here is what your system did five days later.

Keep the original. Forward it to yourself. Do not delete the WhatsApp thread, and do not clear the chat "to tidy up" — export it instead.

Where Can You Take a Wrong Credit Inquiry Complaint?

Four doors, and they are not a ladder you must climb from top to bottom.

• The bank's own grievance machinery — branch, then Nodal Officer.
• The credit information company's dispute process, for correcting the report itself.
• The RBI Ombudsman under the Integrated Ombudsman Scheme, 2021.
• A consumer commission under the Consumer Protection Act, 2019.

The bank's internal complaint

RBI requires banks to maintain a grievance redressal mechanism and to designate a Nodal Officer. Complaints are expected to be closed within 30 days. Write, do not phone. Give dates, attach the assurance email, attach the credit report page, and state exactly what you want — removal of the entry, written confirmation, and compensation. If the reply is a template brush-off, that reply is itself useful later.

Correcting the report with the credit bureau

Separately from the bank, you can raise a dispute with the credit information company that holds the entry. Their process is online, free, and usually resolved within about 30 days. Ask for the specific inquiry to be deleted, not the whole report rebuilt. If the bureau says it cannot act without the bank's confirmation, note that in writing — it tells you the bank is the one stonewalling.

The RBI Ombudsman

Free, online, and no lawyer needed. Two conditions: you must first have complained to the bank, and you must either have been rejected or waited 30 days without a reply. Then file within 30 days of that rejection, and in any event inside one year.

The Ombudsman is not a court. The remedy is generally tied to the loss you actually suffered, so a complaint that says only "the bank misbehaved with me" has little to attach to. A complaint that says "this inquiry was made contrary to the bank's written assurance of this date, it is still on my report, and I want it removed and the loss made good" gives the Ombudsman something to work with. And a closure for insufficient evidence is a comment on the file, not a finding that the bank did nothing wrong.

The consumer commission

A consumer complaint is filed under Section 35 of the Consumer Protection Act, 2019. The wrong here is a "deficiency in service" within the meaning of Section 2(11) — a shortfall in the quality, nature or manner of performance that a bank is required to maintain. Limitation is two years from the date the cause of action arose, under Section 69.

Pecuniary jurisdiction currently puts the District Commission at the level for claims up to ₹50 lakh. Filing can be done online through the e-Daakhil portal or physically at the commission's filing counter, and you may appear yourself or through an advocate. Court fee depends on the value of the claim and the state.

One practical point. The Ombudsman and the commission are parallel routes, not stages of appeal, but a commission is unlikely to be impressed by a complaint filed while an Ombudsman complaint on identical facts is still alive. Pick one, run it properly, and keep the other in reserve.

What to Do If a Bank Made a Wrong Credit Inquiry Without Consent

1. Pull your report from all four bureaus

CIBIL, Experian, Equifax and CRIF High Mark each hold a version. Under the rules one bureau must share your report free of cost once a year — use that. Download the full PDF, not a screenshot. It will show the inquiry, the date, and which lender made it.

2. Freeze the paperwork before you argue

Export the WhatsApp chat with timestamps. Save the assurance email with headers, not as a forwarded body. Keep the loan application reference number and the branch details. Save the Nodal Officer's reply and the Ombudsman's closure order. These four documents are the case.

3. Write to the Nodal Officer, once, properly

A page and a half. What you applied for, when the verification went sideways, the written assurance, the inquiry that followed, what you want done. Attach everything. Do not write about staff rudeness in the same letter — it muddies the file. Send it by email and keep the delivery record.

4. Go to the Ombudsman if the bank stalls

After 30 days with no reply, or on rejection. Attach the same set plus the bank's reply. Be precise about the loss: a higher rate quoted by another lender, a rejected application, a card limit cut. Those are facts. "I felt harassed" is not.

5. File before the commission inside two years

If the Ombudsman route closes without relief, this is where the matter usually goes. There is an argument that a wrong entry sitting on your report is a continuing wrong and the clock keeps running, but do not build on it. Two years from the date you discovered the inquiry is the number to work with, and earlier is always safer.

What a Commission Can Award

• A direction to the bank to write to the credit bureau and have the inquiry removed.
• Compensation for the actual financial loss you can prove — a higher interest rate, a refused loan on worse terms.
• Compensation for mental agony and harassment, where the commission is satisfied the conduct warrants it.
• Litigation costs.
• Interest on the compensation amount, in some orders.

What it will not do is hand out a figure because the bank behaved badly. Every head of compensation has to be tied to something on paper. That is the honest limit of these cases.

Documents to Keep Ready

• Credit reports from all four bureaus, showing the disputed inquiry with its date and the lender's name.
• The bank's written assurance, in its original email form.
• WhatsApp or SMS records of the verification discussions, exported with timestamps.
• The loan application form and reference number.
• The bank's reply to your Nodal Officer complaint, or proof that none came.
• The RBI Ombudsman's closure order, if there is one.
• Anything showing loss — a sanction letter at a higher rate, a decline email, a reduced limit.
• Your ID, address proof and a signed complaint with a verification clause.

Frequently Asked Questions