Legal information notice: this article provides general information and isn't a substitute for advice from a qualified lawyer.
A small, recurring amount keeps leaving your account for a subscription you don’t remember signing up for — or one you tried to cancel weeks ago but is somehow still active. UPI AutoPay mandates are meant to make recurring payments convenient, but an unauthorized or un-cancellable mandate can quietly drain your account in small amounts that are easy to miss. Here’s how to actually stop it and recover what’s already been deducted.
An AutoPay mandate is a standing instruction you set up once — with your UPI PIN as additional factor authentication — allowing a specific merchant or service to auto-debit a set amount on a recurring schedule, without needing your PIN for every individual payment. Under RBI’s e-mandate framework, recurring payments up to ₹15,000 can process without a fresh OTP or PIN each time, provided the mandate was set up correctly with your authentication at the start. You’re legally entitled to a pre-debit notification before each payment, and to edit, pause, or cancel the mandate at any time.
Go to your UPI app’s Profile or Settings section and look for “AutoPay,” “Mandates,” or “Subscriptions” — this shows every active recurring authorization tied to your account, independent of what the merchant’s own app shows you.
Select the specific mandate and choose “Cancel” or “Revoke” (or “Pause” for a temporary stop), authorizing with your UPI PIN. This acts at the UPI/bank level, regardless of what the merchant’s own app does or doesn’t reflect.
Go through recent auto-debits under this mandate to identify every unauthorized or unwanted charge, not just the most recent one.
For any charge you believe was genuinely unauthorized (not just unwanted), file a formal complaint with your bank, ideally within 3 working days for the strongest liability protection.
If your bank doesn’t resolve it within 30 days, escalate via the RBI’s Complaint Management System (cms.rbi.org.in).
It’s worth understanding the difference between a mandate you’re simply unhappy with (say, a subscription you forgot you signed up for) and one that’s genuinely unauthorized (one you never approved at all, or one still debiting after you correctly cancelled it at the UPI/bank level). The first is a cancellation and, at most, a refund-request matter with the merchant. The second is closer to an unauthorized transaction and carries stronger liability protection under RBI’s rules — the distinction matters for which process applies to your specific situation.
Always cancel from within your UPI app’s own mandate list rather than relying solely on a merchant’s in-app “unsubscribe” button — the UPI-level mandate is the actual authorization controlling your money, and it’s the one that needs to be revoked directly.
Once you’ve stopped the mandate, here’s how to handle what’s already been deducted:
| Situation | What Applies |
|---|---|
| You signed up but forgot / didn't read the fine print | Cancel the mandate directly; pursue a refund with the merchant separately |
| You cancelled with the merchant, but debits continued | Cancel again at the UPI/bank mandate level directly — this is the authoritative control |
| You never authorized this mandate at all | Report as unauthorized to your bank — RBI liability rules apply |
No — pausing or cancelling a mandate within your UPI app, and reporting unauthorized debits to your bank, are both completely free.
Yes, for cancelling the mandate and reporting unauthorized debits — this is designed for direct self-service. A lawyer becomes relevant if your bank refuses to acknowledge clearly unauthorized debits, or a merchant refuses a legitimately owed refund for a properly cancelled service.
Need professional legal help with this?
Find a Lawyer on VidyodayIf the mandate itself was set up fraudulently using compromised credentials rather than through a subscription you signed up for, see our general guide on UPI fraud reporting and recovery. For the basics on how RBI’s liability rules work for any unauthorized electronic transaction, see our guide on RBI rules on unauthorized electronic transactions.
Under RBI’s e-mandate framework, recurring payments up to ₹15,000 can process without a fresh OTP or PIN once the mandate is set up with your initial authentication — this is designed for convenience on genuinely low-risk, pre-authorized recurring payments.
Yes — banks and UPI apps are required to send a pre-debit notification with the amount and date before processing, giving you a chance to cancel if needed.
The merchant’s in-app cancellation doesn’t always sync with the actual UPI-level mandate — cancel or revoke it directly within your UPI app’s own “Mandates” or “AutoPay” section to be certain.
Check under Profile, Settings, or Payment Methods for a “Mandates,” “AutoPay,” or “Subscriptions” section — if you still can’t locate it, your bank’s customer care can also process a cancellation directly.
No — a properly cancelled mandate requires fresh authorization from you to be set up again; a merchant cannot unilaterally reactivate it.
Cancelling only stops future debits — recovering past amounts depends on whether they were genuinely unauthorized (report to your bank) or an unwanted-but-authorized subscription (request a refund from the merchant).
They’re different underlying systems, but both are now covered under the same RBI e-mandate framework rules for user control, notifications, and cancellation rights.
Report this immediately to your bank as a potentially unauthorized transaction — this is a stronger case than a simple forgotten subscription and should be treated with the same urgency as any other unauthorized debit.
This article is for general information only and does not constitute legal or financial advice. RBI’s e-mandate rules and app features can change — verify current guidance on rbi.org.in or with your bank before relying on this for a real dispute.
