Fintech Deep Dive — Saturday | October 17, 2026

Consumer rights | Coverage window: October 10–17, 2026 (IST)

This week’s consumer-finance story is not simply that digital products are growing or that individual complaints sometimes win. It is whether ordinary people can understand the product they agreed to, stop a product they did not want, and get a bank or payment intermediary to prove its version of a disputed transaction. Five developments—from consumer commissions to a new credit survey and a delayed UPI fee—show how much still depends on enforceable rights rather than app-level assurances.

1. KYC-linked fraud: a bank cannot just say “the customer shared credentials”

On October 12, The Indian Express reported that the Pathanamthitta District Consumer Disputes Redressal Commission ordered SBI to pay a Kerala couple ₹99,874 that remained from disputed fixed-deposit withdrawals, plus ₹25,000 for distress and ₹10,000 in litigation costs. An earlier Banking Ombudsman process had led to a partial refund. The commission found the disputed transactions unauthorised and said SBI had not substantiated its claim that the customer had shared credentials with fraudsters.

The significance is not that every scam loss automatically becomes the bank’s liability. It is that a bare assertion about what a customer did is not evidence. The RBI’s 2017 customer-liability notification puts the burden of proving customer liability on the bank. It also requires banks to provide round-the-clock channels for reporting unauthorised electronic transactions, acknowledge complaints, act to stop further debits, and resolve liability within the prescribed period. For a third-party breach where neither bank nor customer is at fault, the notification provides zero liability when the customer reports within three working days of receiving the bank’s transaction communication; later reporting can change the liability calculation. The precise rule depends on the facts and the reporting timeline.

That makes evidence and timing central. A customer who spots a debit should contact the bank through its official app, phone line or branch immediately, preserve the complaint number and transaction alert, and avoid deleting messages or statements. The bank should be able to produce the records behind its claim—not simply close the complaint with a template alleging negligence. This is a district consumer-commission order, not a universal ruling on every KYC scam, but it puts the RBI’s burden-of-proof rule into a concrete dispute.

2. A cardholder gets an exit after receiving the wrong, costlier card

A Delhi consumer commission ordered SBI Card to close a card issued to a woman who said she had opted for a SimplyCLICK card costing ₹499 plus GST annually but received a Club Vistara card with a ₹2,999-plus-GST annual fee. She said she had not used the card, sought a downgrade, and later asked for closure; the downgrade was not processed and the issuer did not explain why. In its October 11 report, updated October 12, The Economic Times said the commission directed SBI Card to close the account, generate a bill as of August 4, 2023 if that bill remained unpaid, and pay ₹50,000 compensation. The order allows 60 days for compliance, after which 7% interest applies.

The facts matter: this is the commission’s remedy in one consumer’s case, not an automatic ₹50,000 payout for every card-fee dispute. But it exposes a common imbalance in card relationships. Issuing a product can be frictionless; correcting a mismatch or ending the account can turn into repeated calls, emails and a legal case. The RBI’s 2022 Credit Card and Debit Card Directions require issuers to honour a closure request within seven working days once dues are cleared, and prescribe a ₹500-per-calendar-day penalty for an unjustified delay. Closure should be a customer control, not a retention negotiation.

For cardholders, keep the application or offer showing the product and fees, the first statement, and dated copies of downgrade or closure requests. Ask for written confirmation that the account—not merely the plastic card—has been closed and that the credit bureau has been updated. If an issuer does not act, complain in writing through its grievance process and retain the acknowledgement; escalation becomes much easier when the timeline is documented.

3. UPI’s merchant-fee delay creates a consumer-enforcement test

NPCI announced on October 13 that the planned merchant discount rate on selected person-to-merchant UPI payments would not start on October 15 as scheduled. It is to be implemented “immediately post Diwali” on a date to be notified separately. The reported framework covers eligible merchant payments above ₹2,000; the fee is charged to the merchant side, not a general charge on person-to-person transfers. The delay is a postponement, not a cancellation, and as of this edition there is no replacement start date. The Hindu also reported that the Supreme Court had sought affidavits from NPCI, the Union government and RBI explaining the rationale for the charge; that is ongoing scrutiny, not a court finding that the fee is unlawful.

For consumers, the important question is not only who is billed on paper. Mint’s October 13 explainer describes disagreement among legal experts over how a customer can enforce the no-surcharge rule if a merchant adds a fee only because UPI was selected. NPCI’s network rules and merchant-acquirer contracts may prohibit pass-through, but the customer may not be a party to those contracts; experts also differ on whether that leaves a real protection gap. The article notes there is no single surcharge-specific route that clearly tells a customer who will decide the complaint, by when, and how a refund follows.

If a merchant adds a UPI-only amount, ask for an itemised bill and first request a refund. Keep the invoice, UPI transaction ID and evidence that the extra charge depended on the payment method; complain through the UPI app and to the merchant’s acquiring bank or payment aggregator. The National Consumer Helpline is another route. RBI’s Ombudsman may apply where a covered bank or regulated entity has failed in its service obligations, but it is not an automatic forum for every dispute with a shop. The test of the delayed MDR policy will be whether any future “merchant pays” protection can be enforced in practice—not merely whether the rule exists in an NPCI circular.

4. Digital-credit appetite is real; trust is the limiting condition

The How Urban India Pays 2026 report, released by Pahlé India Foundation with Amazon Pay and covered by Business Standard on October 13, says 88% of surveyed urban consumers are aware of digital credit while 31% use it. It reports stronger use in Tier-2 cities and a sharp confidence divide: respondents rated payment apps 4.11 out of 5 for security and 3.98 for payments, but only 3.10 when the same apps offer credit. Some 51.5% said they would borrow through their app if fraud protection were guaranteed. The survey covered 5,149 consumers across 100 cities in 20 states.

Read those figures as a signal, not a national census or proof that a particular app’s lending is safe. The work was published with a company that is expanding its financial-services business, and the public materials do not establish that the sample represents rural India or all potential borrowers. There is also a small but relevant reporting discrepancy: Business Standard says 1,054 merchants were surveyed, while Amazon’s own summary of the report says 1,089. That difference does not invalidate the consumer findings, but the full report’s sampling and weighting deserve scrutiny before treating its percentages as precise market-wide estimates.

The rights issue is clear even with those caveats. A payment app’s familiar interface can make a credit offer feel like an extension of a trusted payment, when it is a different legal and financial relationship. “Fraud protection” must mean defined responsibility, fast reporting, evidence access and redress—not a marketing promise. Before accepting BNPL or app-based credit, borrowers should see the lender’s identity, total cost and repayment schedule, and know where to complain. Growth in use is not itself evidence of informed consent or good outcomes.

5. HSBC’s ₹200-crore literacy pledge: useful investment, not a substitute for rights

On October 15, HSBC India announced a ₹200-crore financial-literacy philanthropy programme running from 2026 to 2030. Its release says it will work nationwide with non-profit, academic and research partners, with particular attention to women, young people, migrant workers, persons with disabilities, low-income households and first-time users. The stated aim includes practical digital-finance skills and protection against fraud. The announcement is a substantial commitment; it is not evidence that the money has already been spent or that consumers have yet received the promised support.

The programme’s credibility will depend on public delivery details: where the money goes, which partners deliver it, whether material is accessible and in local languages, and how improvements in safe use are measured. The release says an advisory group will help turn the ambition into measurable outcomes, but does not set out public targets for reach or impact. Those targets should be published, alongside independent evaluation and a breakdown of spending.

Financial education can help people spot a fake KYC link or understand a credit offer. It cannot transfer responsibility for secure systems and fair complaint handling from banks and lenders onto customers. The RBI’s unauthorised-transaction rules already place obligations on banks; the two consumer-commission cases this week show why that matters. Literacy is valuable when it adds capability. It becomes a poor substitute when institutions invoke “awareness” after a preventable system failure.

What consumers should watch next

  • After a disputed debit: notify the bank immediately through an official channel, save the acknowledgement and transaction details, and ask for the bank’s written basis if it alleges customer negligence.
  • For credit cards: keep the offered fee and product details; submit a written closure request and track the seven-working-day timeline once dues are cleared.
  • For any new UPI fee: distinguish a disclosed charge applied regardless of payment method from a surcharge triggered specifically by choosing UPI. Ask for an itemised receipt and retain evidence.
  • For digital credit: identify the actual lender and total repayment obligation before accepting an in-app offer. Convenience is not a substitute for a clear contract or a reachable grievance channel.

This week’s consumer-rights test is simple: an institution should have to show what the customer agreed to, show how it handled the complaint, and make the remedy usable without forcing the customer to become a full-time investigator.

Sources