Auto-Debit Fraud Alert 2026: Digital payments have made everyday financial transactions faster and more convenient. From UPI transfers and online shopping to entertainment subscriptions and mobile applications, millions of Indians now depend on automatic payment services.

However, the growing popularity of digital transactions has also created opportunities for cybercriminals to exploit unsuspecting users. One concerning practice involves misleading subscription offers and unauthorised recurring payment instructions that can result in unexpected deductions from bank accounts.

Many consumers activate free trials, download mobile applications or subscribe to online services without carefully examining the payment conditions. As a result, they may unknowingly approve recurring charges that continue even after they stop using the service.

In some cases, fraudsters deliberately use deceptive offers to persuade users to authorise UPI AutoPay mandates or other automatic payment arrangements.

Understanding how these payment systems work and regularly checking active subscriptions can help consumers avoid unnecessary financial losses.

What Is Auto-Debit Fraud and How Does It Work?

Auto-debit fraud refers to situations in which criminals obtain payment authorisation through deception or cause recurring transactions without valid consent.

An auto-debit facility normally allows a service provider to collect a predetermined payment from a customer's bank account, card or supported UPI payment arrangement.

Legitimate recurring payments are commonly used for insurance premiums, utility bills, streaming subscriptions, loan instalments and other services.

The problem arises when users are misled about the amount, frequency or purpose of a payment mandate.

For example, a suspicious website may advertise a free subscription but require users to approve a recurring payment arrangement before accessing the service.

If the customer fails to understand the terms, money may subsequently be deducted according to the approved mandate.

Importantly, not every unexpected subscription charge is fraud. Some deductions result from legitimate subscriptions that customers have forgotten to cancel.

How Can Fraudsters Trick Users Into Approving Recurring Payments?

Cybercriminals and deceptive service providers may use several methods to obtain payment permissions.

1. Misleading Free Trial Offers

Some online platforms attract customers with advertisements promising free access to premium features.

Users may be asked to enter their card details or approve a recurring payment instruction during registration.

After the trial period ends, the subscription may automatically convert into a paid plan.

If the renewal conditions were hidden or misleading, customers could discover the charges only after checking their bank statements.

2. Suspicious Mobile Applications

Certain untrustworthy applications may use confusing subscription screens or misleading payment requests.

Users who approve transactions without reviewing the details may activate services they never intended to purchase.

Downloading applications from trusted stores and checking developer information can reduce the risk.

3. Online Gaming and Premium Features

Some games offer additional features, digital rewards or exclusive access through paid subscriptions.

Users may unintentionally select a recurring payment option while purchasing gaming services.

It is important to distinguish between a one-time purchase and an automatically renewing subscription.

4. Ignoring Subscription Conditions

Consumers sometimes accept payment agreements without reading the terms and conditions.

Important details such as the renewal date, recurring amount, cancellation process and billing frequency may be overlooked.

This can result in unexpected deductions even when the original subscription was legitimately authorised.

5. UPI AutoPay Mandate Misuse

UPI AutoPay allows eligible recurring payments to be processed through an approved mandate.

Fraudsters may attempt to persuade users to approve mandates by presenting them as verification requests, refunds or free-service registrations.

Before authorising any UPI AutoPay request, users should verify the merchant, payment amount, frequency and validity period.

Warning Signs That Your Bank Account May Have an Unwanted Subscription

Unexpected automatic deductions are often discovered through bank statements or transaction alerts.

Consumers should pay particular attention to the following warning signs:

• Small amounts being deducted repeatedly without a clear explanation.
• Monthly payments to unfamiliar merchants or mobile applications.
• SMS notifications about newly activated payment mandates.
• Subscription charges continuing after a service is no longer being used.
• Recurring payments that do not match the amount or frequency originally agreed upon.
• Debit alerts for services the account holder does not recognise.

A single unfamiliar transaction does not necessarily establish fraud, but it should be investigated promptly.

RBI Auto-Debit Rules: Why Pre-Debit Notifications Matter

The Reserve Bank of India has established a regulatory framework for recurring electronic transactions.

Under the applicable e-mandate framework, customers generally receive a pre-debit notification at least 24 hours before a scheduled recurring transaction, subject to relevant exceptions.

These notifications are intended to provide information about upcoming payments and allow customers to review their arrangements.

Consumers should carefully examine messages received from their banks and payment service providers.

If a notification mentions an unfamiliar merchant or unexpected payment, the customer should verify the mandate through the official banking or UPI application.

Users should avoid clicking suspicious links included in unexpected messages.

How to Check and Cancel Unwanted UPI AutoPay Mandates

Most supported UPI applications provide a facility to review recurring payment mandates.

Although the exact menu names may differ between applications, users can generally follow these steps:

Step 1: Open your official UPI application or mobile banking app.

Step 2: Navigate to the AutoPay, Mandates, Subscriptions or Recurring Payments section.

Step 3: Review the list of active payment instructions.

Step 4: Check the merchant name, approved amount, payment frequency and validity period.

Step 5: Select an unwanted mandate and use the available cancellation or revocation option.

Step 6: Complete any required authentication and save the confirmation.

Customers should also cancel the underlying subscription directly with the merchant where necessary. Revoking a payment mandate does not automatically eliminate contractual obligations or outstanding dues.

Six Important Precautions to Prevent Auto-Debit Scams

Consumers can reduce their exposure to recurring payment fraud by adopting a few simple financial safety habits.

Review active subscriptions regularly: Check your bank accounts, UPI applications and card payment arrangements for recurring charges.

Understand free trial conditions: Before registering, confirm when the free period ends and whether a paid subscription begins automatically.

Avoid unfamiliar applications: Download apps from trusted sources and examine their permissions and payment policies.

Never disclose confidential credentials: Do not share OTPs, UPI PINs, banking passwords or card security codes with anyone.

Monitor bank statements: Reviewing transactions regularly can help identify unwanted deductions before they continue for several months.

Enable transaction alerts: Keep SMS and application notifications active so that unexpected payments are noticed quickly.

What Should You Do If Money Is Deducted Without Permission?

If you notice an unauthorised auto-debit transaction, immediate action is essential.

First, contact your bank or payment service provider through its official customer support channel.

Report the disputed transaction and request that any suspicious recurring payment mandate be blocked or revoked.

If card credentials may have been compromised, ask the bank whether the affected card or payment facility should be blocked.

Keep the transaction reference number, date, amount, merchant details and complaint acknowledgement.

If the deduction appears to involve cyber fraud, report the incident through the National Cyber Crime Reporting Portal at https://cybercrime.gov.in.

Victims of financial cybercrime in India can also call the national cybercrime helpline at 1930.

Prompt reporting is important because customer liability and potential refunds depend on the circumstances of the transaction, applicable RBI rules and the time taken to notify the bank.

Consumers should not assume that every disputed subscription payment will automatically qualify for a refund.

Can You Get a Refund for an Unauthorised Auto-Debit?

A refund may be possible depending on whether the transaction was authorised, how the payment mandate was created and whether the bank or merchant violated applicable requirements.

If a customer genuinely authorised a recurring subscription but forgot to cancel it, the refund may depend on the merchant's terms and applicable consumer protection provisions.

However, where an electronic transaction was unauthorised, the bank must examine the complaint under the relevant regulatory framework.

Customers should provide accurate information and cooperate with the investigation.

Preserving evidence and reporting the issue without delay can strengthen the complaint.

Final Takeaway: Keep Control of Your Digital Subscriptions

Automatic payments are useful for managing regular expenses, but they should never be ignored after activation.

A forgotten subscription, misleading free trial or suspicious UPI AutoPay mandate can lead to repeated deductions that gradually affect personal savings.

Consumers should periodically review their active mandates, cancel unnecessary subscriptions and examine all transaction notifications.

If money is being deducted without your permission, contact your bank immediately and report suspected cyber fraud through 1930 or the official cybercrime portal.

Staying alert and understanding recurring payment permissions are among the simplest ways to protect your bank account from unwanted charges.

Source: Based on information published by Journal India on November 2, 2026, with additional general guidance on digital payment safety, recurring mandates and cybercrime reporting.