Fintech Deep Dive — Saturday | October 03, 2026

Focus: Saturday — Consumer Rights: complaints, fraud and safeguards
Coverage period: September 27–October 3, 2026

Executive summary

This week’s consumer-rights story is less about a new app than about whether a user can challenge the system after something goes wrong. The planned UPI merchant discount rate (MDR) arrives on October 15; the Supreme Court has let the rollout proceed for now, while the Consumer Affairs Department is reportedly preparing the National Consumer Helpline (NCH) to answer complaints. Separately, the RBI is pressing banks to find and fix the causes of repeated grievances, and new analysis of cybercrime victims shows that reporting infrastructure still does not reliably lead to resolution. The common test is measurable: clear rules at checkout, complaints routed to a real decision-maker, and money or service restored—not merely a ticket number.

Key developments

1. UPI’s new merchant fee puts “consumer pays nothing” to a practical test

On October 1, Mint reported that the Department of Consumer Affairs was strengthening the NCH ahead of the October 15 MDR start date. Two unnamed government officials said the helpline was being trained to distinguish questions from grievances, explain which transactions must remain free, and route relevant cases to the finance ministry. The officials said complaints about merchants imposing charges contrary to the framework would be examined under the Consumer Protection Act. This is a reported administrative preparation, not a published consumer-facing rulebook; readers should watch for the promised guidance and how the helpline handles actual cases. Mint’s report also explains that NCH is a pre-litigation grievance channel, not a court or a guaranteed refund mechanism.

The policy distinction matters. The Finance Ministry says person-to-person UPI will stay free at every amount, merchant payments up to ₹2,000 will be free, and specified small merchants receiving up to ₹1 lakh a month through QR will remain exempt. The announced 0.4% MDR applies to specified person-to-merchant payments above ₹2,000, with a ₹300 cap on transactions of ₹75,000 or more; separate fixed or lower rates apply to certain sectors. The Ministry says banks have been advised not to let merchants pass the MDR to customers and UPI apps cannot add platform or hidden charges. It estimates about 96% of merchant transactions will be unaffected. Those are official terms and estimates, not a measured post-launch result. The Ministry’s September 15 statement is the source for the boundaries.

The risk is indirect pricing: retailers may absorb MDR, alter general prices, add an unauthorised surcharge, or steer buyers to cash. Only a separate surcharge is easy to document; proving a general price rise came from MDR is harder. NCH must distinguish a prohibited charge from an ordinary price change rather than closing both as generic merchant disputes.

NCH’s capacity is a genuine concern. It recorded 17.71 lakh grievances in 2025, while its average monthly complaint volume rose to about 1.70 lakh from 37,062 in 2017, according to government data cited by Mint. These totals cover consumer issues generally—not UPI MDR complaints—so they are a measure of institutional load, not proof of a coming MDR complaint wave. Before launch, the department should publish a short decision tree: what remains free, what evidence consumers should keep, where an unresolved NCH complaint goes, and what remedy is available. Consumers should save the bill, UPI transaction record and any written surcharge explanation, then report an explicit charge on a protected transaction to the merchant’s payment provider and NCH. A higher shelf price alone is not proof of an MDR violation.

2. The Supreme Court leaves the UPI MDR in place—for now

On September 28, the Supreme Court declined to grant an interim stay of the MDR framework but issued notice and required the Centre, RBI and other respondents to file counter-affidavits within four weeks. The bench also sought clarity about the charge’s legal character and basis. The Hindu reported the court’s questions; Mint reported the Centre’s position that the MDR is a settlement charge among payment-system participants, not money collected by government. The petition, Anjan Datta v. Union of India, challenges the legal basis and design of the new framework. LawBeat’s case report records the notice and the statutory question.

“No stay” means the October 15 start is not blocked by interim relief; it does not mean the Court has validated the policy. Nor are the bench’s questions a finding that the framework is invalid. The case remains open. A merchant-side charge can still affect consumers through surcharges, altered prices or refusal to accept UPI.

The lawsuit asks who sets these boundaries, under what authority and on what evidence. The ₹2,000 threshold and category exemptions create sharp distinctions; consumers need public reasons and a way to challenge misclassification. The four-week reply deadline is the next milestone, not a final hearing. Unless the Court orders otherwise, the announced October 15 rollout remains operative.

3. RBI asks banks to stop treating repeat complaints as isolated tickets

On October 2, The Economic Times reported that the RBI had asked banks to identify the systemic, process and operational causes behind recurring customer complaints and undertake root-cause analysis. The request was discussed at a meeting in September, according to people familiar with it. RBI also called for stronger complaint-handling capacity and industry-level training. The report says more than 1.33 million complaints were received under the ombudsman scheme in FY2025, up 13.55% from the previous year. This is the whole scheme’s complaint load, not a count of UPI failures or fraud reports. The report relies on unnamed meeting participants; it describes a supervisory push, not a public promise of compensation.

The most consequential detail is the reported concern that a significant share of complaints later resolved for customers at RBI level had not first been referred to the bank’s internal ombudsman. If complaints are screened out or misclassified before reaching that independent internal review, a bank can appear to have a grievance system while bypassing one of its safeguards. Root-cause analysis is valuable only if it changes the product or process that created the pattern—failed reversals, unauthorised charges, blocked accounts or repeated documentation demands—not merely the wording of a closure note.

For users, the escalation route is concrete: complain in writing to the bank or regulated payment provider and keep the complaint number and response. Under the RBI’s Integrated Ombudsman Scheme 2026 FAQs, a customer can approach the Ombudsman if the entity does not reply within 30 days (or a longer RBI/NPCI/card-network period), or if its response is unsatisfactory. File within 90 days of the relevant deadline or last communication. Scope and admissibility rules apply; escalation is not a guaranteed refund.

The test is observable outcomes: repeat-complaint themes, internal-ombudsman referrals, resolution times and proof that fixes reduce recurrence. A falling count can mean better service—or consumer abandonment. Without outcome measures and independent review, “root cause” is just another dashboard label.

4. Cyber-fraud victims still lose confidence after the first report

An October 1 analysis by Lokniti-CSDS researcher Krishangi Sinha in The Hindu drew attention to the Status of Policing in India Report 2026: 63% of cybercrime victims surveyed were dissatisfied with police handling, including one in five who were very dissatisfied. Satisfaction falls through the response chain: about half of helpline users were satisfied, compared with 47% for the online portal, 46% during complaint registration and 43% during investigation. The study covered more than 8,300 respondents across 16 States, alongside interviews and focus groups. The report itself was released on September 24—just before this edition’s seven-day window—so these figures are evidence newly analysed this week, not a policy announcement made this week. Sinha’s October 1 analysis details the stages; The Hindu’s report-launch coverage describes the study design.

The burden is not evenly distributed. In the analysis, 34% of people who went to a police station waited two to three hours, 14% waited over four hours, and only 29% were attended to within an hour. Nearly one-quarter said they had to return five or more times; the figure was 38% for rural respondents and 19% for urban respondents. A separate summary of the same survey reported that 72% of digital financial-fraud victims recovered none of their loss, despite many contacting their bank quickly. That is a survey finding, not a regulator-verified recovery rate, and the report’s September 24 release falls outside the strict window. Moneylife’s September 25 account explains the recovery result.

The message is not that a victim should delay reporting; early contact gives banks and authorities the best chance to flag, freeze or trace funds. It is that “report immediately” cannot be the whole consumer-protection policy. Recovery depends on fast coordination among the sending bank, beneficiary bank, payment provider, telecom channel and police, with a clear case owner and a way to check what action was taken. The study’s experience of repeated visits and weak follow-through suggests that digital portals have improved intake more than remedy. Banks should record a fraud report as a serious case even when the customer was manipulated into authorising a payment; victim-blaming does not stop a mule transfer or explain what the bank did next.

If money has left an account, contact the bank immediately through its official number or app, ask it to register a fraud complaint and preserve the reference number, then report through India’s official cybercrime channel at 1930 and cybercrime.gov.in. Keep screenshots, transaction IDs and messages. Do not pay a “recovery agent” who promises to retrieve the funds. Reporting is urgent, but neither a helpline call nor an acknowledgement guarantees reimbursement.

Trend analysis

Across these developments, consumer protection is shifting from rules on paper to the quality of the hand-off. The MDR framework has a defined free zone, but its real effect will depend on prices and complaint handling after October 15. RBI’s instruction to analyse repeat complaints is a useful move from ticket-counting toward system repair, but its effect depends on whether internal ombudsmen see cases and banks publish outcomes. Cybercrime reporting is more accessible than before, yet victims still face long delays, repeated visits and low recovery. In each case, the weak point is not a lack of a channel; it is what happens after someone uses it.

Consumer checklist and watchlist

  • From October 15, check whether a merchant is adding a separate UPI fee to a payment that the official framework says should remain free. Keep the bill and transaction record; report an explicit surcharge to the merchant/provider and NCH.
  • For a bank or payment complaint, record the date, complaint ID, amount and written response. If there is no response within 30 days or the response is unsatisfactory, check eligibility and escalate through RBI’s CMS.
  • For suspected fraud, alert the bank immediately and report to 1930 / cybercrime.gov.in. Preserve the evidence and avoid paid “recovery” offers.
  • Watch for the government’s four-week response in Anjan Datta v. Union of India, NCH’s promised MDR guidance, and evidence that banks’ root-cause reviews reduce repeat complaints rather than simply close them.

Sources