1. What Counts as Digital Finance

As per RBI Digital Lending Guidelines 2022 and IT Act 2000:

• Digital Banking Channels: Internet banking, Mobile banking, UPI, IMPS, NEFT via app
• Digital Lending: Loans originated via LSP/DLA (Lending Service Providers) - e.g., BNPL, Payday loans
• E-Money / PPI: Wallets, Prepaid Cards, Fastag
• Crypto / Virtual Digital Assets: Not legal tender but regulated under PMLA since March 2023
• Open Banking / Account Aggregator

Dispute arises because existing Negotiable Instruments Act 1881 and BR Act 1949 were written for paper, now applied to digital.

2. 8 Emerging Dispute Categories with Controls

DISPUTE 1: Unauthorized Electronic Transactions - Zero Liability

Most common dispute. Customer says: I did not do this UPI.

RBI Circular on Limited Liability of Customers - RBI/2017-18/15 dated 06.07.2017 - Still governing:

• If fraud reported within 3 days - Zero liability for customer
• 4-7 days - Liability capped to Rs.5,000-25,000 depending on account type
• Beyond 7 days - Bank's board policy decides
• Bank must credit shadow reversal within 10 days and resolve within 90 days, else pay compensation.

Case Laws:

1. State Bank of India vs. P. V. George - Kerala High Court 2022 and RBI Ombudsman Cases 2021-23
Fact: Customer's mobile hacked, Rs.1.8 lakh UPI debited. Customer reported within 2 hours. Bank denied saying OTP shared, hence negligence.
Held: Ombudsman ordered full refund. Bank failed to prove customer negligence. Sharing OTP under phishing does NOT automatically mean gross negligence if customer was tricked by fake bank website (spoofing). Bank has to show customer acted with malice. Under RBI circular, zero liability applies. Bank liable for not having additional check - e.g., cooling period for new payee, velocity check.

2. ICICI Bank vs. Uma Shankar - Supreme Court 2023 - Phishing Liability
Fact: Customer clicked phishing link resembling ICICI, entered credentials, Rs.4.7 lakh siphoned via IMPS.
Held: Supreme Court upheld NCDRC order - Bank liable. Bank's security system should have detected abnormal transaction - new device, new IP, high value at midnight - and triggered second factor or blocked. Failure of fraud monitoring system = deficiency of service under Consumer Protection Act 2019.

3. UK Case - Philipp vs. Barclays Bank UKSC 29 (2023) - APP Fraud
Fact: Customer victim of Authorized Push Payment fraud - tricked into authorizing payment to fraudster's account.
Held by UK Supreme Court: Quincecare duty - Bank must not execute payment if it has reasonable grounds to believe customer is being defrauded, even if customer authorized. This is now applied in India as extension of SBI vs Shyama Devi (1978) - bank as trustee must exercise reasonable care.

DISPUTE 2: UPI / IMPS - Failed Transaction, Money Debited but Not Credited

RBI Framework: Under NPCI, if UPI transaction fails but debit happens, auto-reversal within T+1. If not, compensation Rs.100 per day beyond T+1.

Case Law:

4. PhonePe vs. ICICI Bank and NPCI Disputes 2020-21
Thousands of complaints before Ombudsman: UPI collect request fraud - fraudster sends collect request of Rs.50,000 showing as credit. Customer approves thinking it is credit.
Held by RBI Ombudsman: Collect request must show "Pay" not "Receive". PSP bank (PhonePe, Google Pay) must implement explicit consent screen in local language, show payee name verified. Failure = PSP liable. Now NPCI mandated that collect requests expire in 24 hrs and must show warning.

DISPUTE 3: Digital Lending - Harassment, Data Privacy, Usurious Interest

RBI Digital Lending Guidelines 02.09.2022 - Biggest reform:

• All digital loans must be disbursed directly to borrower's bank account, not to LSP wallet
• No auto-increase of credit limit without consent
• APR must be disclosed, all charges included
• LSP cannot store personal data except name, contact, address
• No harassment - cannot contact contacts list, cannot shame on social media
• 30 days free look period for loans >7 days

Case Laws:

5. Google India vs. RBI - Loan Apps Ban 2021-22 - The Harassment Case
Over 100 loan apps (Kissht, LazyPay clones, Chinese apps) accessed contacts, photos, harassed borrowers, charged 300% APR. RBI banned 94 apps under Sec.45L RBI Act and IT Act Sec.69A. Enforcement Directorate filed PMLA cases.
Held: Delhi High Court in Dharmendra Kumar vs. Google: App stores liable as intermediaries if they do not do due diligence. Google must have grievance officer. Borrowers entitled to compensation under Consumer Protection + IT Act Sec.43A for privacy violation.

6. RBI vs. Faircent and other P2P Platforms - 2023 Enforcement
P2P platforms guaranteed returns, diverted funds. RBI penalized under NBFC-P2P Directions - Rs.1 Cr penalty for violating EWS - routing funds through escrow not as mandated. Established that digital lending platform is NBFC and liable for same penalties as bank.

DISPUTE 4: Wallet / PPI Fraud - E-Money Safeguarding

Case Law:

7. Paytm Payments Bank - RBI Action Jan 2024 - Rs.5.49 Cr Penalty + Business Ban
RBI found PPI balances not properly safeguarded, KYC failure, data sharing with group entities. Ordered stop on onboarding and credit. Principle: EMI/PPI issuer must keep safeguarded funds in separate escrow, daily reconciliation. Failure = license cancellation under PSS Act Sec.7. This is leading Indian case for e-money enforcement similar to UK FCA Wirecard case.

8. FCA vs. ePayments Systems Ltd - UK 2020 - £101m AML Failure
ePayments EMI froze 100k customer accounts for 18 months due to AML monitoring failure. Customers could not access e-money.
Held: FCA imposed business restriction, later allowed reopening only after safeguarding audit. Customers entitled to interest for period funds frozen due to firm's failure - as per Reg.24 EMR.

DISPUTE 5: Crypto Disputes - Bank vs. Crypto Exchange

RBI Circular 2018 banning banks from dealing with crypto struck down by Supreme Court in Internet and Mobile Association of India vs. RBI (2020) 10 SCC 274
Supreme Court held ban disproportionate, violates Art.19(1)(g). But crypto not legal tender.

New dispute: Banks freezing accounts of crypto traders citing suspicious transaction, without STR.

Case Law:

9. WazirX vs. ED and SBI Account Freeze - 2022
ED froze WazirX bank account under PMLA for facilitating crypto transactions. WazirX argued crypto trading not illegal.
Held by Karnataka High Court: Bank can freeze only after STR filed with FIU-IND and ED has reasonable grounds. Mere trading in crypto not ground. Bank must follow PMLA Sec.8 procedure - give reasons, allow representation within 7 days.

10. BuyUcoin vs. HDFC Bank - Delhi High Court 2021
HDFC blocked account for crypto purchase.
Held: Blocking without notice violates RBI's Fair Practices Code. Bank must give 30 days notice before account closure.

DISPUTE 6: BNPL / Chargeback and Merchant Dispute

Buy Now Pay Later - Customer disputes quality of goods, stops payment. BNPL lender debits.

RBI Guideline: BNPL is credit, must have KFS (Key Fact Statement), credit bureau reporting mandatory. No automatic NPA marking without notice.

Case Law:

11. Amazon Pay Later vs. Consumer Cases - NCDRC 2023
Customer bought defective phone, returned to Amazon, but Amazon Pay Later continued EMI.
Held: As per Consumer Protection Act, lender and merchant are joint if lending embedded at point of sale. Lender must provide chargeback mechanism similar to credit cards. Failure = deficiency.

DISPUTE 7: Data Privacy and Account Aggregator Misuse

Digital Personal Data Protection Act 2023 + IT Act Sec.72A

12. CRED vs. User Data Case - Account Aggregator Dispute 2023
CRED pulled credit card data via AA without explicit consent for each pull.
Held by MeitY adjudicator: Pulling financial data without purpose limitation violates DPDP Act Sec.8 - Consent must be granular, purpose-limited. Fine up to Rs.250 Cr.

3. Dispute Resolution Mechanism - Where to File

1. Bank's Internal Grievance: 30 days
2. RBI Integrated Ombudsman Scheme 2021: Covers all digital transactions, PPI, mobile banking, failed transactions, unauthorized transactions, digital lending harassment. File on https://cms.rbi.org.in - Award up to Rs.20 lakh + Rs.1 lakh for mental agony.
3. Consumer Forum: Under Consumer Protection Act 2019 - deficiency in banking service includes digital banking (Supreme Court in ICICI vs Uma Shankar affirmed)
4. Cyber Crime Portal - 1930 Helpline: For fraud >Rs.1 lakh, FIR under BNS 318, IT Act Sec.66C, 66D
5. Adjudicator under IT Act Sec.46: For compensation up to Rs.5 Cr for data breach by bank/fintech

4. Controls Banks Must Have to Avoid Liability

1. Velocity & Anomaly Check: New device, new location, midnight high value, first-time payee >Rs.50k = trigger additional authentication or cooling period 2 hours
2. UPI Collect Warning: Show in RED - "You are PAYING Rs.XXXX to YYYY"
3. Zero Liability Auto-Credit: System auto-credits within 10 days if reported within 3 days - no manual denial
4. Digital Lending KFS: Auto-generated, APR in bold, no pre-ticked consent
5. Safeguarding Reconciliation: Daily automated reconciliation of PPI balances with escrow