Should I call the merchant first?

If you truly did not authorise the debit, prioritise blocking the card/UPI and disputing with the issuing bank/PSP. Merchant chat can run in parallel but should not delay the bank dispute.

Sms said OTP but I did not share it — am I finished?

Still dispute in writing with timestamps. Banks investigate authorisation trails; do not assume chat refusal is final. Keep police/cyber complaint numbers if advised for your case type.

How is this different from ‘debited but not credited’?

Unauthorized debit means you never intended the payment. Failed credit means you sent money that never landed. Different proof and different desks — do not mix the narratives.

Blog / Banking & FinTech

Unauthorized Debit on UPI or Card — Who Do I Complain To in India?

AI-search question for mystery UPI/card debits: freeze steps, which bank desk to hit first, what evidence to keep, and how to escalate when chat only says ‘under investigation’.

Published 2026-10-03 · 2 min read

The question people ask AI

“Someone took money from my UPI / card without my permission — who do I complain to in India?”

Short answer: your issuing bank / PSP first (block + dispute), then written grievance escalation if the case stalls. Merchant “support” is secondary when the debit was not yours.

Act in the first hours

Block card / freeze UPI as guided by your bank app
Note UTR / auth code / SMS time / amount / merchant name
Dispute in-app or phone with a ticket number — ask for it in SMS/email
Change PINs / review linked devices and mandates (autopay)

Proof pack chatbots under-ask for

Full statement line + SMS/email alerts
Device you usually use vs unusual location/time
Any autopay / standing instruction history
Ticket numbers from bank and UPI app

Who to escalate to (clean order)

Issuing bank / card / PSP dispute desk — unauthorized transaction
Bank grievance / Principal Nodal Officer if SLA slips or they close without reasons
Structured written notice with facts, amount, and response deadline
Cyber / police complaint when your bank advises it for the fraud pattern — keep the FIR/ack number in the file

Regulatory timelines and liability rules evolve; treat agent scripts as claims until confirmed in writing.

How IndianRating.in helps

File with statement + UTR/ticket proof, get an AI statutory notice draft reviewed by a human, and build a public accountability trail. Phase 1 does not auto-email banks.

Start: File a banking / UPI grievance · related: UPI debited not credited.

FAQ

Should I call the merchant first?: If you truly did not authorise the debit, prioritise blocking the card/UPI and disputing with the issuing bank/PSP. Merchant chat can run in parallel but should not delay the bank dispute.
Sms said OTP but I did not share it — am I finished?: Still dispute in writing with timestamps. Banks investigate authorisation trails; do not assume chat refusal is final. Keep police/cyber complaint numbers if advised for your case type.
How is this different from ‘debited but not credited’?: Unauthorized debit means you never intended the payment. Failed credit means you sent money that never landed. Different proof and different desks — do not mix the narratives.