Differences
This shows you the differences between two versions of the page.
| — | rbi-e-mandate-2026-no-otp-recurring-auto-debit-india [2026/07/22 17:47] (current) – created - external edit 127.0.0.1 | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| + | {{htmlmetatags> | ||
| + | ====== RBI e-Mandate Rules 2026: No OTP for Auto-Debit up to ₹15,000 ====== | ||
| + | |||
| + | |||
| + | |||
| + | {{ : | ||
| + | |||
| + | <WRAP center round info 95%> | ||
| + | **Quick Reply:** RBI e-Mandate Framework 2026 lets recurring auto-debits up to Rs 15,000 run without an OTP each time, Rs 1,00,000 for SIPs and insurance. Here is what changes. | ||
| + | </ | ||
| + | |||
| + | <WRAP info> | ||
| + | **Do you still enter an OTP for your SIP or insurance auto-pay?** For the recurring debit itself, no - if each instalment is within the limit. Under RBI's Digital Payments E-mandate Framework, 2026, recurring transactions up to ₹15,000 each can be debited without an OTP. The limit is ₹1,00,000 for SIPs, insurance premiums and credit card bills. But you still enter a one-time OTP when you first register, modify or cancel the mandate. | ||
| + | </ | ||
| + | |||
| + | Is ₹15,000 enough to cover your monthly auto-debits? | ||
| + | |||
| + | ===== What an e-mandate is ===== | ||
| + | |||
| + | An e-mandate is your standing permission for a merchant to pull a recurring payment from your card, Prepaid Payment Instrument (PPI) or UPI on a fixed schedule. You authorise it once. After that, each cycle' | ||
| + | |||
| + | ===== AFA limits: what changed and what still needs an OTP ===== | ||
| + | |||
| + | The Additional Factor of Authentication (AFA) is the one-time password or PIN that confirms it is really you. RBI's Digital Payments E-mandate Framework, 2026, dated 21 April 2026, consolidated the bank's earlier e-mandate circulars into a single framework and reset the no-OTP execution limits. | ||
| + | |||
| + | The table below shows where a recurring debit runs without an OTP, and where an OTP is still mandatory. | ||
| + | |||
| + | ^ Action / payment type ^ Per-transaction limit for no-OTP execution ^ OTP still needed? ^ | ||
| + | | General recurring debits (subscriptions, | ||
| + | | Insurance premiums | Up to ₹1,00,000 | No OTP for each debit within limit | | ||
| + | | Mutual fund subscriptions (SIPs) | Up to ₹1,00,000 | No OTP for each debit within limit | | ||
| + | | Credit card bill payments | Up to ₹1,00,000 | No OTP for each debit within limit | | ||
| + | | Any single debit above the applicable limit | Not covered | Yes - OTP required for that debit | | ||
| + | | Registering a new e-mandate | n/a | Yes - one-time OTP at setup | | ||
| + | | Modifying an existing e-mandate | n/a | Yes - one-time OTP | | ||
| + | | Cancelling or withdrawing a mandate | n/a | Yes - one-time OTP | | ||
| + | |||
| + | Note: the framework applies across cards, PPIs (wallets) and UPI. RBI also bars banks and merchants from levying any charge on customers for the e-mandate facility. | ||
| + | |||
| + | ===== How to set up, modify and cancel an e-mandate ===== | ||
| + | |||
| + | The exact screens differ by bank and app, but the flow is the same everywhere. | ||
| + | |||
| + | - **Set up.** On the merchant' | ||
| + | - **Modify.** Open the auto-pay or mandates section in your bank app or UPI app. Select the mandate, change the amount cap or frequency, and confirm with an OTP. A change always re-triggers AFA. | ||
| + | - **Cancel or withdraw.** In the same mandates section, select the standing instruction and choose cancel or pause. Confirm with an OTP. Once cancelled, no further debit can be pulled on that mandate. | ||
| + | |||
| + | If your bank app does not show a mandate you know exists, ask the bank's PIO-equivalent grievance desk in writing - and read [[https:// | ||
| + | |||
| + | ===== The 24-hour pre-debit notice and your opt-out right ===== | ||
| + | |||
| + | The framework keeps the protection that made e-mandates safe in the first place. Before every debit, the issuer (your bank or card network) must send you a pre-debit notification at least 24 hours in advance. That notice must give you an option to opt out of that specific debit. After the money moves, you also get a post-debit notification. | ||
| + | |||
| + | This is your early-warning system. If a pre-debit alert shows an amount or merchant you do not recognise, act on the opt-out before the 24 hours run out - do not wait for the debit. | ||
| + | |||
| + | ==== How to stop an unwanted auto-debit ==== | ||
| + | |||
| + | - **Use the pre-debit opt-out.** The fastest stop. Decline the specific debit from the notification when the 24-hour window is open. | ||
| + | - **Cancel the mandate.** In your bank or UPI app, cancel the standing instruction so no future cycle can run. | ||
| + | - **Tell your bank in writing.** If the app fails, instruct your bank in writing to stop the mandate and to reverse a wrong debit. Keep the acknowledgement. | ||
| + | |||
| + | If money was pulled fraudulently or without a valid mandate, see [[https:// | ||
| + | |||
| + | ==== Escalating to the RBI Ombudsman ==== | ||
| + | |||
| + | If your bank does not resolve a wrong or unauthorised auto-debit, escalate. First, file a written complaint with the bank and wait for its reply or 30 days, whichever is earlier. If you are not satisfied, take it to the RBI Ombudsman under the Reserve Bank - Integrated Ombudsman Scheme, 2021 (RB-IOS 2021), the RBI's free dispute-redress route for banking and payment grievances. For a full walkthrough, | ||
| + | |||
| + | For the bigger picture on filing complaints and using your information rights against any public authority, keep [[https:// | ||
| + | |||
| + | ===== FAQ ===== | ||
| + | |||
| + | ==== Do I need an OTP for every SIP or insurance auto-debit now? ==== | ||
| + | |||
| + | No - not for the recurring debit itself, as long as each instalment is within the no-OTP limit. For SIPs, insurance premiums and credit card bills that limit is ₹1,00,000 per transaction. You only enter an OTP when you first register the mandate or later modify or cancel it. | ||
| + | |||
| + | ==== What is the OTP-free limit for ordinary recurring payments? ==== | ||
| + | |||
| + | ₹15,000 per transaction for general recurring debits such as OTT subscriptions, | ||
| + | |||
| + | ==== Does the no-OTP rule mean an auto-debit can never be stopped? ==== | ||
| + | |||
| + | No. You get a pre-debit notification at least 24 hours before every debit, with an option to opt out of that debit. You can also modify or cancel the mandate at any time, and that change requires a one-time OTP. The OTP-free part covers only the routine execution within the limit. | ||
| + | |||
| + | ==== Is there any fee for using an e-mandate? ==== | ||
| + | |||
| + | No. Under RBI's Digital Payments E-mandate Framework, 2026, banks and merchants cannot charge customers for the e-mandate facility. If you see a charge labelled for setting up or maintaining a standing instruction, | ||
| + | |||
| + | ==== Does this apply to UPI and wallets too? ==== | ||
| + | |||
| + | Yes. The framework covers cards, Prepaid Payment Instruments (wallets) and UPI. So a UPI AutoPay mandate, a wallet standing instruction and a card-based recurring payment all follow the same AFA limits and the same 24-hour pre-debit notice rule. | ||
| + | |||
| + | |||
| + | ===== Related 2025 to 2026 guides ===== | ||
| + | |||
| + | Newer rules you may also want to read: | ||
| + | |||
| + | * [[https:// | ||
| + | * [[https:// | ||
| + | |||
| + | ===== Related guides ===== | ||
| + | * [[https:// | ||
| + | * [[https:// | ||
| + | |||
| + | {{tag> | ||