Dispute Resolution For Digital Payments - Detailed Explanation

1. Legal Framework

Digital Payments in India = UPI, IMPS, NEFT, RTGS, PPI Wallets, Cards, AEPS

Governed by:

• Payment and Settlement Systems Act, 2007 - Sec 10A - Basis for UPI, zero MDR framework.
• RBI Circular Dated 6 July 2017 - Customer Protection - Limiting Liability of Customers in Unauthorised Electronic Banking Transactions - This is the Bible. Supreme Court has repeatedly held that RBI Directions are binding law.
• NPCI Guidelines - UPI Dispute Resolution (UDIR) + UPI Help AI chatbot - Launched Oct 2025 - Centralised system for complaint redressal across member banks and PSPs.
• RBI Integrated Ombudsman Scheme, 2021 - One Nation One Ombudsman - cms.rbi.org.in - free resolution.
• RBI Circular on Turn Around Time (TAT) for failed transactions - Failed transaction must be auto-reversed with Rs 100 per day penalty after T+1.

2. Types of Digital Payment Disputes

3. Zero Liability Framework - The Core

RBI circular sets tiered liability:

Clause 6(a) - Zero Liability for Customer:

• If fraud is bank's fault (system breach, internal failure) - Customer bears zero liability regardless of reporting time.
• If third-party breach where deficiency lies neither with bank nor customer - e.g., hacking of NPCI, malware, SIM swap by telco - customer has zero liability if reports within 3 working days of receiving communication of transaction.

UPI is electronic banking channel and circular covers all electronic banking transactions including card, internet banking, IMPS, NEFT, RTGS, UPI, mobile wallet and AEPS.

Clause 7 - Customer Negligence:
If fraud results from customer's own negligence defined as sharing credentials (OTP, PIN) - customer bears full liability until reporting, after reporting bank liable.

RBI Draft Amendment March 6, 2026: If fraud occurs due to bank negligence — system failure, failure to send SMS alerts — customer still enjoys zero liability and bank must refund full amount regardless of Rs 25,000 cap.

Procedure: Report within 3 days via phone + email + written complaint + cybercrime portal 1930.

4. Step-by-Step Dispute Resolution Hierarchy

STEP 1: Bank Internal - 0 to 30 days

• Call bank customer care, get complaint number.
• Bank must resolve failed transaction: From auto-reversal with Rs 100 per day penalty for failed transactions to zero liability within three working days for unauthorized transactions, from direct bank-to-bank flows - machinery is in place and courts enforcing strictly.
• For UPI: Raise via UPI app - Google Pay / PhonePe / Paytm - > Transaction > Raise dispute.

STEP 2: NPCI - UDIR - If PSP bank not resolving

• NPCI oversees UPI transactions and can intervene in unresolved disputes.
• File on NPCI portal under Dispute Redressal Mechanism.
• NPCI's UPI Help AI assistant integrated with UDIR system for easy grievance handling and tracking.
• Timeline: NPCI gives 10 days to banks to resolve.

STEP 3: RBI Integrated Ombudsman - 30 days after bank complaint

If bank does not resolve within 30 days, customers can approach RBI Integrated Ombudsman Scheme, 2021 notified vide RBI/2021-22/83 dated Nov 12, 2021.

File at cms.rbi.org.in free. Ombudsman can award up to Rs 30 lakh + Rs 1 lakh for mental harassment.

STEP 4: Consumer Forum / High Court Writ

Banking service is service under Consumer Protection Act 2019. Also Writ under Art 226 for violation of RBI circular which is law.

5. Leading Case Laws - How Courts Enforce Zero Liability

CASE 1: Kerala High Court - SBI vs Customer - Rs 3.73 Lakh OTP Fraud - 2024 - Landmark

Facts: Woman lost Rs 3.73L via 4 Spice Digital wallets created using her details. She reported same day. Banking Ombudsman rejected saying she was privy, case falls under Clause 7(i) customer negligence.

High Court held:
Investigation revealed one Sandip Bauri used her details to create 4 wallets and siphoned amount. Court set aside Ombudsman order, held she was entitled to zero liability under RBI customer-protection framework because she reported fraud on same day. Bank must restore amount within 4 weeks. Placed case under Clause 6(ii) zero liability for third-party breach reported within 3 days, not under customer negligence provision.

Ratio: Burden to prove customer negligence lies on bank, not customer. Ombudsman cannot assume negligence.

CASE 2: Bombay High Court - Unauthorized Transaction - RBI Circular 06/07/2017 - 2024

Court clarified: Under RBI Circular, customer has zero liability in cases of unauthorized electronic banking transactions arising out of third-party breach where deficiency lies neither with bank nor customer but elsewhere in system, provided customer notifies bank within three working days.

Even if fraud via social engineering, if bank failed to send SMS alert or had weak system, bank liable.

CASE 3: Supreme Court - SBI vs Pallabh Bhowmick - SLP No. 30677/2024 - 2025 - Binding Precedent

Supreme Court upheld Bombay HC order in Jaiprakash Kulkarni case.

Facts: Unauthorized transactions without intimation on mobile or email registered with bank.

Supreme Court held: If unauthorized transactions have taken place without intimation to petitioners either on mobile number or email ID, bank cannot claim customer negligence. Must refund with interest. This is under Clause 8 of circular - Customer's liability will be zero if fraudulent transaction reported within 3 working days from date customer receives communication.

CASE 4: Allahabad High Court - No Relief When Customer Negligence Established - 2024

Facts: Customer shared OTP with fraudster impersonating bank manager.

Court held: No relief under RBI Cyber-Fraud Circular when customer negligence is established. If customer shares OTP, Clause 7 applies - customer bears full loss. Zero liability not available.

Distinguished from third-party breach.

CASE 5: Allahabad High Court - Burden of Proof - 2023

In RBI Circular dated June 6, 2017 titled Customer Protection - Limiting Liability, zero liability arises when he informs bank within 3 working days. Burden to prove customer's liability in case of unauthorized electronic banking lies upon bank.

So bank must prove with logs that OTP was entered from customer's device, IP, etc. Mere assertion not enough.

CASE 6: Delhi High Court - Credit Card Fraud + Harassment - Rs 1 Lakh Cost - 2024

Facts: Bank's collection agent harassed customer to repay bill of fraud transaction despite interim restraint.

Court directed full financial restoration including reversal of charges, restoration of CIBIL score and Rs 1 lakh in costs for harassment. Court deprecated RBI Ombudsman's automated complaint rejections and required supervised, accountable redress. Judgment reinforces consumer primacy and strict responsibility on banks in digital fraud cases.

CASE 7: Supreme Court PIL - UPI MDR - Anjan Datta vs Union of India - WP(c) Diary No 57387/2026 - Current 2026

PIL challenges Centre's decision to introduce 0.4% MDR on P2M UPI transactions above Rs 2,000 effective Oct 15, 2026 under Sec 10A Payment and Settlement Systems Act as amended in 2026.

SC sought response from Centre, RBI, NPCI. SC refused to stay MDR, but agreed to scrutinize constitutional validity.

Relevance to dispute resolution: If MDR introduced, dispute resolution for merchant overcharging becomes new category - who bears MDR? Court says platform fees or hidden charges prohibited under framework.

CASE 8: Wrong UPI Transfer - Civil Remedy - Indian Contract Act Sec 72

You can file complaint on NPCI portal under Dispute Redressal Mechanism. While process starts with banking procedures, if recipient refuses to cooperate, matter can escalate to legal dispute involving civil and criminal law. Applicable Sections: Indian Contract Act Sec 72 - primary civil remedy for money paid by mistake, wrongful gain or misappropriation.

Karnataka HC held recipient of wrong UPI credit must return, else criminal breach under Sec 406 IPC.

6. Practical Checklist to Win Digital Payment Dispute

Immediate Action (Golden Hour): Call bank + 1930 cybercrime helpline + block UPI via app. Reporting within 24 hours legally entitles to zero liability - Bank of Baroda Thikri Branch case where fraud reported same day, bank's Digital Fraud Management Cell approved refund but later denied - court held bank estopped.

Written Complaint: Email to bank's nodal officer + principal nodal officer with subject: "Unauthorized Electronic Transaction - Zero Liability Claim under RBI Circular 06.07.2017".

Evidence Preservation: Screenshot of SMS (or lack of SMS), transaction ID, UPI ID, email, call recording.

Escalation: If no reversal in 10 days (UPI) / 7 days (other), file NPCI UDIR + CMS RBI Ombudsman.

Legal Notice: Cite Clause 6(a) zero liability + Kerala HC 2024 + SBI vs Pallabh Bhowmick SC 2024 + Bombay HC unauthorized transaction case.

Consumer Case: File before District Consumer Commission for deficiency + harassment + CIBIL damage.

One Important Warning from RBI Draft 2026: This is one-time, lifetime benefit - you get exactly one chance to use RBI compensation mechanism. RBI incorporated Aadhaar verification to track repeat claims. So don't misuse.