Finance
UPI Disputes and Failed Payments: What Recourse Actually Exists
A failed transfer must reverse by the next day or the bank owes you Rs 100 a day. An unauthorised transaction reported within three working days is not your loss. A payment you were tricked into making is a different case, and the rules say so.
By Nina Shah · Updated · 9 min read
Short answer
How long does a failed UPI transaction take to refund?
UPI recourse depends on which of three things happened. A failed transaction, where money left your account and did not reach the recipient, must be auto-reversed by the beneficiary bank by the next day for a transfer and within five days for a merchant payment under the RBI's 2019 turnaround-time rules, with Rs 100 a day payable to you for each day of delay beyond that. An unauthorised transaction - someone else used your account without your involvement - carries zero liability for you under the RBI's 2017 circular if reported within three working days, limited liability of Rs 5,000 to Rs 25,000 depending on account type if reported within four to seven working days, and liability per the bank's policy after that. A payment you authorised but were deceived into making is not covered by those liability rules; it is a fraud complaint through the 1930 helpline and cybercrime.gov.in, with recovery depending on how fast the funds are frozen. Disputes are raised in the UPI app, which files a ticket with NPCI, then escalate to the bank's grievance officer and, after 30 days, to the RBI's Integrated Ombudsman.
Our practical verdict
The first thing to establish when a UPI payment goes wrong is what kind of wrong it is, because the rules give you three different answers. Money that left your account and did not arrive is a failed transaction. Money that left without you doing anything is an unauthorised transaction. Money that left because someone deceived you into sending it is a fraud you authorised. Each has its own rule and its own route.
Failed transactions are the easy case and the one with a clock. Under the Reserve Bank's turnaround-time framework of September 2019, a failed UPI transfer must be auto-reversed by the beneficiary bank by the next day, and a failed merchant payment within five days. Miss the deadline and the bank owes you Rs 100 a day for every day of delay, without your having to claim it. In practice most reversals happen within hours; the deadline is the thing to cite when they do not.
Unauthorised transactions are governed by the RBI's circular of July 2017 on limiting customer liability, and its protection is a clock too. If the loss came from a third-party breach with no fault on your side and you report it within three working days, your liability is zero. Report within four to seven working days and liability is capped at Rs 5,000 to Rs 25,000 depending on the account type. After seven days the bank's own policy applies. The practical instruction is to report on the day you notice, because every protection in the rule is tied to how quickly you did.
Shortlist
Recommended options to compare
Use this as a starting list, then compare live India prices and warranty before buying.
Pick 1
First, which of three things happened
Money left and did not arrive: a failed transaction. Money left without your involvement: an unauthorised transaction. Money left because you were deceived into sending it: a fraud you authorised. The rules treat these very differently, and the first thing to establish, before raising anything, is which one you are dealing with.
Pick 2
Failed transactions must reverse, on a clock
Under the RBI's turnaround-time framework of September 2019, a failed UPI transfer must be auto-reversed by the beneficiary bank by the next day, and a failed merchant payment within five days. If the bank misses that, it owes you Rs 100 for every day of delay beyond the deadline, without your having to ask. Most reversals happen within hours; the deadline is what you cite when they do not.
Pick 3
Unauthorised transactions: the three-day rule
The RBI's circular of July 2017 on limiting customer liability sets the position. If the loss comes from a third-party breach with no fault on your side and you report it within three working days, your liability is zero. Report within four to seven working days and liability is limited to Rs 5,000 to Rs 25,000 depending on the account type. After seven days, the bank's own policy applies. Report on the day; the clock is the whole protection.
Pick 4
Fraud you were tricked into is different
A payment you approved - to a fake seller, a fake customer-care number, a QR code that took money instead of sending it - is authorised in the system's eyes, and the liability rules above do not apply. The route is the national cybercrime helpline on 1930 and cybercrime.gov.in, where a complaint within the first hour or two can lead to the receiving account being frozen. Recovery depends almost entirely on speed.
Pick 5
How a dispute actually travels
Raise it in the UPI app first; that files a ticket in NPCI's dispute system and goes to your bank. If unresolved, write to the bank's grievance officer, whose details are on its site. If the bank has not resolved it within 30 days, or you are unhappy with the answer, the RBI's Integrated Ombudsman takes complaints online and its decisions bind the bank. Keep the transaction ID and every reference number from each stage.
Pick 6
Wrong recipient is neither failed nor fraud
Money sent to the wrong UPI ID is a completed, authorised transaction to a real person, and no rule compels its return. Ask your bank to contact the recipient's bank, and contact the recipient if you can; most such cases resolve by goodwill, some do not. The protection here is checking the name that appears before you confirm, which the app shows for exactly this reason.
Pick 7
What reduces the risk before anything goes wrong
Set a transaction limit in the app, never approve a collect request you did not initiate, and treat any request to pay in order to receive money as the fraud it always is. UPI is a credit line's cousin when it is linked to one, and the BNPL guide covers that; for an ordinary bank-linked account, the three checks above prevent most of what this page is about.
Which option should you choose?
First, which of three things happened
Money left and did not arrive: a failed transaction. Money left without your involvement: an unauthorised transaction. Money left because you were deceived into sending it: a fraud you authorised. The rules treat these very differently, and the first thing to establish, before raising anything, is which one you are dealing with.
Failed transactions must reverse, on a clock
Under the RBI's turnaround-time framework of September 2019, a failed UPI transfer must be auto-reversed by the beneficiary bank by the next day, and a failed merchant payment within five days. If the bank misses that, it owes you Rs 100 for every day of delay beyond the deadline, without your having to ask. Most reversals happen within hours; the deadline is what you cite when they do not.
Unauthorised transactions: the three-day rule
The RBI's circular of July 2017 on limiting customer liability sets the position. If the loss comes from a third-party breach with no fault on your side and you report it within three working days, your liability is zero. Report within four to seven working days and liability is limited to Rs 5,000 to Rs 25,000 depending on the account type. After seven days, the bank's own policy applies. Report on the day; the clock is the whole protection.
Fraud you were tricked into is different
A payment you approved - to a fake seller, a fake customer-care number, a QR code that took money instead of sending it - is authorised in the system's eyes, and the liability rules above do not apply. The route is the national cybercrime helpline on 1930 and cybercrime.gov.in, where a complaint within the first hour or two can lead to the receiving account being frozen. Recovery depends almost entirely on speed.
How a dispute actually travels
Raise it in the UPI app first; that files a ticket in NPCI's dispute system and goes to your bank. If unresolved, write to the bank's grievance officer, whose details are on its site. If the bank has not resolved it within 30 days, or you are unhappy with the answer, the RBI's Integrated Ombudsman takes complaints online and its decisions bind the bank. Keep the transaction ID and every reference number from each stage.
Wrong recipient is neither failed nor fraud
Money sent to the wrong UPI ID is a completed, authorised transaction to a real person, and no rule compels its return. Ask your bank to contact the recipient's bank, and contact the recipient if you can; most such cases resolve by goodwill, some do not. The protection here is checking the name that appears before you confirm, which the app shows for exactly this reason.
What reduces the risk before anything goes wrong
Set a transaction limit in the app, never approve a collect request you did not initiate, and treat any request to pay in order to receive money as the fraud it always is. UPI is a credit line's cousin when it is linked to one, and the BNPL guide covers that; for an ordinary bank-linked account, the three checks above prevent most of what this page is about.
Choice IQ pick
Need the faster shortlist?
Start with our recommended options, then compare the tradeoffs that matter for your budget and workflow.
See top picksHow to decide
Pick the option around the job you need done. This is the fastest way to avoid paying for something that looks impressive but does not change your real workflow.
| Situation | Best starting point | Final check |
|---|---|---|
| First, which of three things happened | Money left and did not arrive: a failed transaction. Money left without your involvement: an unauthorised transaction. Money left because you were deceived into sending it: a fraud you authorised. The rules treat these very differently, and the first thing to establish, before raising anything, is which one you are dealing with. | Use this as a shortlist, then verify the final details before committing. |
| Failed transactions must reverse, on a clock | Under the RBI's turnaround-time framework of September 2019, a failed UPI transfer must be auto-reversed by the beneficiary bank by the next day, and a failed merchant payment within five days. If the bank misses that, it owes you Rs 100 for every day of delay beyond the deadline, without your having to ask. Most reversals happen within hours; the deadline is what you cite when they do not. | Use this as a shortlist, then verify the final details before committing. |
| Unauthorised transactions: the three-day rule | The RBI's circular of July 2017 on limiting customer liability sets the position. If the loss comes from a third-party breach with no fault on your side and you report it within three working days, your liability is zero. Report within four to seven working days and liability is limited to Rs 5,000 to Rs 25,000 depending on the account type. After seven days, the bank's own policy applies. Report on the day; the clock is the whole protection. | Use this as a shortlist, then verify the final details before committing. |
| Fraud you were tricked into is different | A payment you approved - to a fake seller, a fake customer-care number, a QR code that took money instead of sending it - is authorised in the system's eyes, and the liability rules above do not apply. The route is the national cybercrime helpline on 1930 and cybercrime.gov.in, where a complaint within the first hour or two can lead to the receiving account being frozen. Recovery depends almost entirely on speed. | Use this as a shortlist, then verify the final details before committing. |
Read the editorial notes
Fraud that you were tricked into is the case the liability rules do not cover, and it is the case most people mean when they say they lost money on UPI. A payment to a fake seller, a fake customer-care line, or a QR code presented as a way to receive money is authorised in the system's eyes. The route is the national cybercrime helpline on 1930 and cybercrime.gov.in, and it works when it is fast: a complaint within the first hour or two can lead to the receiving account being frozen before the money moves on. After that, recovery is uncertain.
A dispute travels a fixed path. Raise it in the UPI app, which files a ticket in NPCI's dispute system and puts it with your bank. If that stalls, write to the bank's grievance officer. If the bank has not resolved it in 30 days, the RBI's Integrated Ombudsman takes the complaint online and its decision binds the bank. Keep the transaction ID and the reference number from each stage, because each stage will ask for the last one.
One case fits none of the three: money sent to the wrong UPI ID. It is a completed, authorised payment to a real person, and no rule compels its return; the bank can ask, and most people give it back, and some do not. The protection is the name the app shows before you confirm, which exists for exactly this reason, and the transaction limit in the app's settings, which bounds what any single mistake can cost.
Decision shortcut
Still comparing options?
Use the table above to shortlist your best fit, then check related picks, tools, and buying guides before you make the final call.
FAQ
How long does a failed UPI transaction take to refund?
Under the RBI's turnaround rules a failed transfer must auto-reverse by the next day, and a failed merchant payment within five days. If the bank misses the deadline it owes you Rs 100 for each day of delay.
Am I liable for an unauthorised UPI transaction?
Not if you report it within three working days and the loss came from a third-party breach with no fault on your side, under the RBI's 2017 circular. Reported within four to seven working days, liability is limited to Rs 5,000 to Rs 25,000 by account type. After that, the bank's policy applies.
Can I get money back if I was scammed on UPI?
The liability rules do not cover a payment you authorised. Report to the 1930 helpline and cybercrime.gov.in immediately; if the receiving account is frozen quickly the money can be recovered, and speed is the deciding factor.
Where do I complain if my bank does not resolve a UPI dispute?
First the bank's grievance officer. If unresolved after 30 days, the RBI's Integrated Ombudsman, online, whose decisions bind the bank. Keep every reference number.
This guide is educational and not legal or financial advice. Liability caps and turnaround times are set by RBI circulars and bank policy and may be revised; report any loss to your bank and the 1930 helpline immediately rather than relying on a summary.
Finance Guides Lead
Nina writes about everyday money decisions, credit cards, calculators, and transparent personal finance tools.
Keep reading
Related finance picks
Finance
Pay Later at Festive Checkout: What You Are Actually Signing Up For
Amazon Pay Later, Flipkart Pay Later and the rest are credit lines from a regulated lender, reported to the credit bureaus, and interest-free only until a date. What that means before you tap it at checkout.
Finance
What Actually Moves a Credit Score in India, and What Does Not
Payment history and utilisation move it. Your income, your savings and checking your own score do not. Since January 2025 lenders report every fortnight, so what you do shows up in weeks rather than months.
Finance
No Cost EMI in India: What It Actually Costs You
The RBI said in 2013 that zero-percent interest does not exist. It still does not. Here is where the cost moved to, and the arithmetic on a Rs 60,000 purchase.
Tool
EPF Calculator India
Project your EPF corpus at 58, using the share of contributions that actually accumulates.
Comparison
Prepay Home Loan vs Invest: Which Is the Better Use of Money?
A guaranteed return equal to your loan rate, against an uncertain higher one. The maths is clearer than the argument suggests.
The best choice is rarely the product with the longest feature list. It is the one you will still trust and use six months from now.
How Choice IQ evaluated this guide
Choice IQ explains UPI recourse by separating failed, unauthorised and deceived transactions, the RBI's 2019 turnaround-time rules with Rs 100 a day compensation, the 2017 limited-liability circular's three-day and seven-day windows, the 1930 cybercrime route, the NPCI-to-bank-to-Ombudsman escalation path, and the wrong-recipient case that none of the rules cover.
Weekly intelligence
Get smarter AI tool picks weekly.
One useful email with practical comparisons, refresh alerts, and decision frameworks for people who do not want another noisy newsletter.