1. Taxonomy - What Counts as Digital Finance Dispute?

[grey]

Resolution forum changes with each.

2. India - Legal Architecture for Digital Finance [Your Location]

A. Regulated Finance - RB-IOS 2021 Integrated

Covers:

• Banks, NBFCs, Payment System Operators, Credit Information Companies

Grounds for digital finance:

• Unauthorized electronic transaction
• Non-adherence to Digital Lending Guidelines 2022
• Failure to ensure digital lending app disclosure
• Non-adherence to Fair Practices Code for digital lending

Limitation: Rs 20L compensation + Rs 1L mental agony.

B. Unregulated Finance - No RB-IOS

For loan apps without NBFC, crypto exchanges - RBI has no jurisdiction.

Path:

1. Consumer Protection Act 2019 - Deficiency in service - Consumer Commission - Most effective for digital finance
2. IT Act 2000 Sec 43A, 66C, 66D - Compensation for data theft, impersonation
3. PMLA + 1930 Cyber Crime - Criminal
4. SEBI SCORES - If investment app
5. FIU-IND - For crypto P2P not refunding

C. Account Aggregator Framework - Dispute Unique

If data shared without consent via AA, dispute goes to AA - RBI AA Master Direction - consent artifact log is evidence.

3. Spain / EU - Architecture

A. Servicio de Reclamaciones - Banco de España / CNMV / DGSFP
After SAC of entity rejects [1 month], go to regulator. Non-binding but 70% complied.

B. ECSP - Crowdfunding Dispute - New
EU Regulation 2020/1503 Art 38: Platform must have internal complaint handling, then go to competent authority - CNMV in Spain.

C. MiCA - Crypto Dispute - Effective June 2024
Art 71 MiCA: CASP must have complaint procedure, respond in 15 business days, inform of ADR. In Spain, CNMV is CASP supervisor.

D. PSD2 + DORA + ADR
PSD2 Art 101: Member states must have ADR - In Spain: Juntas Arbitrales de Consumo + Servicio de Reclamaciones.

4. End-to-End Dispute Resolution Process - Digital Finance

Step 0: Preserve Evidence - Most Important

For digital finance, evidence disappears in 24h.

Must capture:

• Screen recording of app flow
• Consent SMS, email with headers
• Device logs - App version
• Transaction ID - UTR for UPI, Hash for crypto

Step 1: Notice to Regulated Entity - 3 Days Rule

If unauthorized, report within 3 working days for zero liability - RBI Circular 06.07.2017 applies to ALL digital finance via RE, not just banking. Also applies to credit cards, wallets, BNPL.

Spain: PSD2 Art 71 - Notify without undue delay, max 13 months.

Step 2: Internal Grievance - Digital Lending Guidelines Para 9

Digital lending app must show:

• Name of RE + LSP + Grievance officer in app
• KFS with APR
• Link to RB-IOS

If not shown = violation = automatic win in Ombudsman.

Step 3: Regulatory Ombudsman

• India: cms.rbi.org.in - Select Digital Lending / Unauthorized transaction
• Spain: reclamaciones.bde.es

Step 4: ADR / Mediation

India: RBI does not have mediation, but Consumer Commission has mediation under Sec 74 CPA 2019 - 50% cases settle.

Spain: Mediación mandatory before court for claims <€2000 in some CCAA.

Step 5: Consumer Court / Juzgado + Criminal

5. Detailed Case Laws - Digital Finance - The Core

INDIA

CASE 1: Digital Lending App Harassment - THE Landmark

Laxmi Finserv + 100 Loan Apps - RBI Circular + Telangana Police Case 2022 + Supreme Court Suo Motu - Google vs. Dharanidhar 2023

Facts: Customer borrowed Rs 5k from loan app, repaid Rs 15k with penal interest, app accessed contacts and sent morphed images.

SC + RBI action:

• App not RE - loan void ab initio - RBI Digital Lending Guidelines Para 2.1: All loans must be disbursed directly from RE bank account to borrower account, not via LSP pool.
• If disbursed via pool = violation = loan unenforceable
• Compensation Rs 5L under CPA - harassment + privacy breach under DPDP Act + IT Act Sec 66E

Ratio: For digital finance, disbursement trail decides validity. If money not from RE account, loan is illegal.

CASE 2: P2P Lending - Lendbox / Faircent - RBI P2P Master Direction

Rohit Kumar vs. Lendbox - Consumer Forum Delhi 2022

Lender invested Rs 2L via P2P, borrower defaulted, platform did not recover.

Held: P2P platform is NOT guarantor - it is intermediary per RBI P2P Direction Para 6(1)(iv). Cannot promise assured return. If platform promised assured return = deficiency. If it disclosed risk, not liable.

CASE 3: Crypto Exchange - No Refund - WazirX / CoinSwitch

Arnav Singh vs. WazirX - Consumer Forum Mumbai 2023

Customer deposited INR, crypto not credited, WazirX said blockchain congestion.

Forum: Crypto exchange is service provider under CPA 2019 Sec 2(42). Even if crypto not regulated, fiat handling is regulated. Failure to credit = deficiency. Refund + 9% interest.

CASE 4: BNPL - LazyPay / Simpl - Is BNPL Loan?

RBI Notification 20.06.2022 - BNPL as Loan

RBI clarified: BNPL with deferred payment = credit facility = must follow Digital Lending Guidelines, report to CIC, KFS.

Case: Simpl vs. Consumer - Bangalore Consumer 2023
Simpl charged late fee Rs 250 for Rs 500 transaction - 50%. Held: Penal charges must be reasonable per RBI Circular on Penal Charges 18.08.2023. 50% = usurious, refund.

CASE 5: Payment Aggregator Failure

CC Avenue vs. Merchant - NCDRC 2021

Merchant did not receive settlement for 15 days.

Held: Payment Aggregator is fiduciary - must keep funds in escrow per RBI PA Guidelines 2020 - escrow settlement T+1. Delay = deficiency + interest.

SPAIN / EU

CASE 6: Crowdfunding - MytripleA / ECSP - Audiencia Provincial Madrid 2023

Investor invested €20k via crowdfunding platform, project defaulted, platform did not do due diligence.

Court applied EU ECSP Reg 2020/1503 Art 23: Platform must conduct minimum due diligence + disclose risk. Failure = liability for 50% loss.

First case applying ECSP in Spain.

CASE 7: Crypto - Bit2Me - CNMV Warning + Juzgado

Juzgado Mercantil Madrid 2022 - Bit2Me

Customer lost €15k due to alleged hacking.

Court: Bit2Me was not CASP under MiCA yet, but acted as custodian - so obligation of custody - must prove not negligent. Could not prove cold wallet security. Liable.

CASE 8: TJUE C-242/22 - P2P + PSD2 - Liability for Unauthorized

EU Court: P2P platform that holds e-money requires PI license. If unauthorized transaction, platform must refund under PSD2 even if it claims it is just tech.

CASE 9: Spanish Supreme Court - Bizum / Phishing - STS 2023

Customer authorized Bizum thinking it was from bank.

Court: Authorization vitiated by deceit Art 1269 CC. PSD2 gross negligence requires intent or reckless disregard, not mere gullibility. Bank must refund.[dolo]

CASE 10: DORA - First Sanction - ESMA 2025

EU bank fined under DORA for not having exit plan for cloud provider - AWS outage caused digital finance downtime. Sets precedent: Operational resilience is compliance obligation.

6. Evidence Standards - Digital Finance

Courts now demand:

1. Consent Artifact: For AA, digital lending - RBI requires consent log with timestamp, purpose, data fields - Sec 6 DPDP Act. If bank cannot produce = deemed no consent.
2. KFS: If KFS not shown before disbursal, loan terms unenforceable - RBI Guidelines Para 5.
3. Blockchain Forensics: For crypto disputes, courts accept Chainalysis report as evidence.

7. Compensation Matrix

8. Draft Strategy for Your Complaint

If your case is Digital Finance [not pure banking]:

1. Classify: Is counterparty RE? Check RBI list of NBFC + PA.
2. If RE: File RB-IOS + Consumer - parallel allowed
3. If non-RE: Direct Consumer + IT Act Sec 43A + 1930 FIR + Google Play report for loan app removal
4. Attach: KFS screenshot, disbursement trail, consent log demand