Bank Deducted Insurance Premium Without Consent? Your Rights

If a bank debited an insurance premium from your account without your clear, informed consent, that is not a routine charge. It is an unauthorised debit, and you are entitled to have it reversed. Consumer commissions have repeatedly treated an unconsented premium deduction by a bank as a deficiency in service, which makes the bank answerable for the money taken and, in most orders, for interest and compensation on top of it.

This guide sets out, in plain English, why a bank deducted insurance premium without consent is a legal wrong rather than a billing dispute, the exact provisions that apply, who has to prove what, the steps to recover the money, the realistic cost and time involved, and the mistakes that cost people their claim. Everything below is written for an ordinary account holder, not for a specialist.

Why an unauthorised debit is a legal wrong, not a service glitch

Two separate legal relationships are broken when a premium leaves your account without your agreement, and it helps to see them apart, because you have a remedy against each.

The first is the banker and customer relationship. Money in a current or savings account is a debt the bank owes you, and the bank can only move it out on your mandate. That mandate can take three forms: a specific instruction you gave, a standing instruction you signed, or an electronic auto-debit mandate you knowingly authenticated. Absent one of those three, the bank has debited money it had no authority to touch. It does not matter that the money went to an insurer rather than into the bank's own pocket.

The second is the contract of insurance. An insurance policy is not something that can be conferred on a person; it has to be applied for. The Indian conduct rules build the whole sales process around a documented proposal, a suitability assessment for savings-linked life products, a signed benefit illustration and a customer information sheet. If none of that paperwork exists, there was never a proposal, so there was never a policy, so the premium was collected without any lawful basis at all.

Banks are entitled to sell insurance. Most banks act as corporate agents for one or more insurers and cross-selling is a legitimate, regulated line of business. What is not legitimate is enrolling a customer who never applied, presenting a policy as a free add-on, or telling a borrower that cover is compulsory for a loan, a locker or an account when it is not. That behaviour is commonly described as mis-selling of insurance by a bank. Once money actually leaves the account on the back of it, the problem stops being a sales complaint and becomes an unauthorised debit.

Two separate relationships are broken by an unconsented debit, and each has its own test.

The statutory framework, section by section

Consumer Protection Act, 2019

This is the workhorse. A bank account holder is a consumer under Section 2(7), banking and insurance are services under Section 2(42), and a shortcoming in the manner of performing a service is a deficiency under Section 2(11). Section 2(11) is drafted widely: it covers any fault, imperfection, shortcoming or inadequacy in the quality, nature and manner of performance, and it expressly includes an act of negligence or omission causing loss to the consumer, and the deliberate withholding of relevant information from the consumer. A premium debited without a proposal falls inside that definition twice over.

Where the bank or its staff told you the cover was free, or bundled, or mandatory, you get a second and stronger head of claim: unfair trade practice under Section 2(47), which covers false representation and misleading statements made to promote the sale of a service.

The rest of the machinery matters just as much as the definitions. Section 34 gives the District Commission its jurisdiction, Section 47 the State Commission and Section 58 the National Commission, in each case fixed by the value of the consideration paid. Section 35 sets out how a complaint is filed, including electronically. Section 38 governs procedure once the complaint is admitted, gives the opposite party 30 days to respond (extendable by not more than 15 days) and asks the Commission to decide the case, as far as possible, within three months where no laboratory analysis is needed and within five months where it is. Section 39 lists the reliefs a Commission can order. Section 41 allows an appeal to the State Commission within 45 days. Section 69 is the limitation provision: two years from the date on which the cause of action arose, with power to condone delay for sufficient cause recorded in writing. Sections 71 and 72 deal with enforcement, and Section 72 makes non-compliance with a Commission's order punishable with imprisonment of not less than one month and up to three years, or a fine of not less than Rs 25,000 and up to Rs 1 lakh, or both. Chapter V of the Act, at Sections 74 to 81, sets up consumer mediation cells, and Section 37 allows a Commission to refer a dispute to mediation where a settlement looks possible.

The Reserve Bank of India rulebook

The current consolidated source is the Reserve Bank of India (Commercial Banks, Responsible Business Conduct) Directions, 2025, issued on 28 November 2025 and updated as on 1 July 2026. Chapter IV of those Directions is where an unauthorised debit is dealt with, and it is worth knowing three parts of it by name.

Part C deals with erroneous debits arising on fraudulent or other transactions. Paragraph 63 is blunt about what a bank must do rather than what it may do: where a branch is satisfied that an irregularity or fraud has been committed by its staff against a customer, the branch is to acknowledge liability at once and pay the just claim; where the bank is at fault, it is to compensate the customer without demur; and where neither the bank nor the customer is at fault, the customer is still to be compensated up to a limit fixed in the bank's Board approved customer relations policy.

Part D is the limiting liability of customers in unauthorised electronic banking transactions framework, the successor to the RBI's circular of 6 July 2017 on the same subject. Paragraph 67 gives a customer zero liability where the unauthorised transaction arose from contributory fraud, negligence or deficiency on the part of the bank, irrespective of whether the customer reported it, and also in a third party breach where the customer notifies the bank within three working days of receiving the bank's communication about the transaction. Paragraph 68 sets limited liability where the customer reports within four to seven working days of that communication, capped at the transaction value or a table figure, whichever is lower, ranging from Rs 5,000 for a basic savings bank deposit account to Rs 25,000 for larger current, cash credit and overdraft accounts and for credit cards with a limit above Rs 5 lakh. Paragraph 72 requires the bank to make a shadow reversal of the disputed amount within 10 working days of notification, value dated as of the date of the unauthorised transaction, without waiting for any insurance settlement of its own. Paragraph 73 requires the complaint to be resolved and the customer's liability, if any, established within the period set in the bank's Board approved policy and in any case not later than 90 days.

Paragraph 75 is the single most useful line in the whole framework for a customer: the burden of proving customer liability in an unauthorised electronic banking transaction lies on the bank. You do not have to prove a negative. The bank has to produce your mandate.

If the bank does not fix it, the free regulatory route is the Reserve Bank Integrated Ombudsman Scheme, 2026, in force from 1 July 2026, which replaced the 2021 scheme. Complaints are filed on the RBI Complaint Management System, with a 24x7 contact centre on 14448. Under the official RBI FAQs on the scheme, you must first complain to the bank, and you can go to the Ombudsman if there is no reply within 30 days or if you are dissatisfied with the reply. The complaint to the Ombudsman must be filed within 90 days of that timeline expiring or of the bank's last communication, whichever is later. There is no cap on the amount that can be disputed. The Ombudsman can award up to Rs 30 lakh for consequential loss and, separately, up to Rs 3 lakh for loss of the complainant's time, expenses, harassment and mental anguish.

Insurance law and the IRDAI conduct rules

Insurance business is governed by the Insurance Act, 1938 and by regulations and circulars issued by the Insurance Regulatory and Development Authority of India under the IRDA Act, 1999. The document to know is the IRDAI Master Circular on Protection of Policyholders' Interests, 2024. Four things in it decide most unconsented premium disputes.

First, the sales file. For savings related life products and annuities, the insurer or the distribution channel must carry out a documented suitability assessment, record the need analysis, hand a copy to the prospect and make it part of the policy document. A customised benefit illustration must be given at the point of sale and signed both by the prospective policyholder and by the authorised sales person. A proposal form is required to buy a life policy. Within 15 days of accepting a proposal the insurer must furnish, free, a covering letter telling you about the free look period, the policy document, a copy of the proposal form you submitted, a copy of the benefit illustration, the Customer Information Sheet and the need analysis document.

Second, the free look period. For a policy with a term of one year or more, you get 30 days from the date you receive the policy document to review it and return it. The insurer must accept the cancellation request irrespective of the reason. The refund is the premium paid, less only a proportionate risk premium for the period of cover, any medical examination expenses and stamp duty. That refund must reach you within 7 days of the cancellation request, and if it is late the insurer must pay interest, on its own initiative, at bank rate plus two percent from the date of the request to the date of refund.

Third, cancellation outside the free look window. An indemnity based health policy can be cancelled by the policyholder at any time on 7 days' written notice, with a proportionate refund for the unexpired period where no claim has been made.

Fourth, the grievance route. Complaints can be registered with the insurer directly or on the IRDAI's Bima Bharosa portal, must be acknowledged immediately and resolved within 14 days. If you are not satisfied, the Insurance Ombudsman can be approached free of charge where the claim amount is up to Rs 50 lakh. An insurer must honour an Ombudsman award within 30 days, failing which a penalty of Rs 5,000 per day of delay is payable to the complainant, unless the insurer has appealed within those 30 days.

When a signature has been forged

Most of these disputes are civil. A minority are not. If a proposal form was filled in and signed in your name by somebody else, or a mandate was fabricated, criminal law is in play and the code numbers have changed. The Indian Penal Code, 1860 has been replaced by the Bharatiya Nyaya Sanhita, 2023. Cheating, formerly IPC Section 415 and punishable under Sections 417 and 420, is now BNS Section 318, with Section 318(4) covering cheating that dishonestly induces delivery of property. Making a false document, formerly IPC Section 464, is now BNS Section 335; forgery, formerly IPC Sections 463 and 465, is BNS Section 336, with Section 336(3) covering forgery intended to be used for cheating; and using a forged document as genuine, formerly IPC Section 471, is BNS Section 340(2). Criminal breach of trust, formerly IPC Section 405, is BNS Section 316.

Procedure has moved too. The Code of Criminal Procedure, 1973 is replaced by the Bharatiya Nagarik Suraksha Sanhita, 2023. An FIR in a cognizable case is registered under BNSS Section 173 (formerly CrPC Section 154). If the police refuse, a Magistrate can direct investigation under BNSS Section 175(3) (formerly CrPC Section 156(3)), and a private complaint is filed and the complainant examined under BNSS Section 223 (formerly CrPC Section 200). Evidence is now governed by the Bharatiya Sakshya Adhiniyam, 2023, and the certificate route for electronic records, formerly Section 65B of the Indian Evidence Act, 1872, is BSA Section 63. That last point matters in practice, because your proof is usually a bank statement, an SMS trail and a screen record.

A word of caution before anyone rushes to a police station. A criminal complaint is a serious step, and filing one does not get your money back any faster. In the ordinary case, where a bank simply enrolled you without a proposal, the civil and regulatory routes are quicker, cheaper and far more likely to end in a refund. Reserve the criminal route for a genuine forgery, and take advice before you make an allegation of that kind against a named individual.

Consent or no consent: how each situation is treated

The dividing line is whether you gave informed, documented consent. The table below reflects how these fact patterns are usually treated.

Who has to prove what

Customers usually assume they have to prove they never consented. They do not. Under paragraph 75 of the 2025 RBI Directions the bank carries the burden on customer liability, and under the IRDAI Master Circular the insurer is the party that is supposed to be holding the sales file. So the most effective single move in one of these disputes is a written demand for documents. Ask for them by name, in one letter, and give a deadline.

That last row is worth dwelling on. Banks and insurers regularly answer a complaint by saying the free look period has expired. The free look period runs from receipt of the policy document. If the insurer cannot show when, or whether, the policy was delivered to you, that defence is weak.

Step by step: how to get the premium reversed

Speed matters more than eloquence here, because two of the deadlines that protect you are measured in working days.

Deadline warning. Zero liability turns on how fast you report. Put the unauthorised debit in writing to the bank within three working days of its communication about the transaction and you carry no liability at all; report between the fourth and the seventh working day and your protection drops to a capped figure. Waiting to see whether the money comes back on its own is what converts a full reversal into a partial one.

1. Fix the date of each debit. Download the statement, mark every premium debit, and note the narration exactly as it appears. If it is a recurring debit, list each one separately, because each debit is its own cause of action for limitation purposes.
2. Report the unauthorised debit to the bank in writing the same day you spot it. Use the bank's website complaint form, the toll free line and email, and keep the acknowledgement number. Reporting within three working days of the bank's communication about the transaction is what secures zero liability under paragraph 67 of the RBI Directions.
3. Stop the bleeding. In the same communication, instruct the bank to cancel any standing instruction, NACH mandate or e-mandate linked to that policy so that the next premium does not go out while you argue about the last one.
4. Invoke the free look period if you are inside it. Write to the insurer, and copy the bank, cancelling the policy and asking for the refund within 7 days. Say expressly that no proposal was ever submitted, so the cancellation is without prejudice to your case that there was no contract at all.
5. Demand the sales file. Send the document list in the table above to the bank's grievance officer and to the insurer's grievance redressal officer. Give them 15 days. This letter does more work than any other single step.
6. Escalate inside the institution. Take the complaint to the bank's nodal or principal nodal officer and to the insurer's grievance redressal officer, or register it on Bima Bharosa. The insurer's turnaround time is 14 days.
7. Go to the regulator. If the bank has not replied within 30 days or the reply does not satisfy you, file free on the RBI Complaint Management System within 90 days. For the policy itself, approach the Insurance Ombudsman, which is free where the claim is up to Rs 50 lakh.
8. Send a legal notice. A short notice quantifying the debits, the interest and the compensation sought, with a 15 day deadline, settles a meaningful proportion of these cases without a filing.
9. File the consumer complaint. If nothing has worked, file before the District Commission where you reside or work, or where the branch is, using the e-Jagriti portal. Plead both deficiency in service under Section 2(11) and unfair trade practice under Section 2(47), and implead both the bank and the insurer, because they will each try to blame the other.
10. Enforce the order. If you win and the money is not paid, apply under Section 71 and, if needed, invoke Section 72. Awards that are ignored are far more common than they should be, and the enforcement provisions are what make them real.

The clocks that matter

What it costs and how long it really takes

The figures below are indicative ranges for a straightforward premium recovery of a few thousand to a few lakh rupees, based on how these matters typically run in Bengaluru. They are not quotations, and they move with the value of the claim, the number of hearings and how hard the bank fights.

Two practical notes on cost. First, you may appear in person before a consumer commission; representation is not compulsory. Second, filing fees under the consumer rules are deliberately low and are nil for small value claims, so cost is rarely the real barrier. Time is.

What a consumer commission can actually order

Section 39 of the Consumer Protection Act, 2019 is the menu. In an unconsented premium case, the reliefs that are realistically available are the return of the price paid, that is the premium actually debited; payment of compensation for loss or injury suffered due to the negligence of the opposite party; discontinuance of the unfair trade practice and a direction not to repeat it; and costs. Interest is routinely granted from the date of each debit. Where the conduct has affected a class of consumers rather than one person, the Commission can also order corrective steps of a wider kind.

On quantum, be realistic. In a small value case the compensation head is usually modest, often a few thousand to a few tens of thousands of rupees over and above refund and interest. The value of pursuing it is not only the money. It is that a documented order against the bank tends to fix the systemic behaviour, and it also removes the policy from your records, which matters if the unwanted cover is later used to argue non-disclosure on a genuine claim.

Section 39 is the menu, and in an unconsented premium case four reliefs are realistically available.

Mistakes people actually make

These are the errors that turn a winnable complaint into a lost one.

• Waiting to see if the money comes back on its own. The zero liability protection is measured in working days. A month of patience can convert a full reversal into a capped one.
• Complaining only on the phone. If it is not in writing with an acknowledgement number, it did not happen. Call, then confirm by email the same day.
• Cancelling the policy and treating that as the end. Cancellation stops future premiums. It does not refund the past ones, and a bare cancellation letter can be characterised later as acceptance of the policy.
• Accepting a partial refund without a written reservation. If a bank offers to return one premium out of three, take it, but write that it is accepted without prejudice to the balance claim.
• Suing only the bank, or only the insurer. Implead both. The bank says it merely acted as a corporate agent; the insurer says it relied on the bank. If only one is before the Commission, that argument can succeed.
• Missing the two year limitation in Section 69. People discover a five year old debit and file immediately, which is right, but they then plead the wrong start date. Plead the date of knowledge and the date of the bank's refusal, and if there is delay, file a proper condonation application with reasons.
• Not asking for the sales file. A complaint that simply asserts absence of consent is weaker than one that annexes the bank's failure to produce a proposal form after a written demand.
• Overreaching on compensation. A claim for a few thousand rupees of premium coupled with a demand for several lakh in damages invites the Commission to discount everything. Ask for the refund, interest, a proportionate compensation and costs.
• Ignoring the tax and policy consequences. If a deduction was claimed on that premium in a past return, or a claim was made on the policy, say so at the outset rather than letting the other side produce it.

A note from practice

The single most common shape this dispute takes is not fraud, and it is not a forged signature. It is a customer who walked into a branch to renew a fixed deposit or to close a loan, signed a stack of papers at a counter, and discovered a premium debit months later. That customer usually starts the conversation apologising, because somewhere in the stack there is a signature and they assume that ends it. It does not. A signature on an unexplained page is not the same as a documented proposal, a signed benefit illustration and a recorded need analysis, and the regulatory framework asks for all of those, not for a signature. Our experience is that the cases that resolve fastest are the ones where the customer stops arguing about what was said at the counter and simply asks, in writing, for the documents the institution is required to hold. Silence in response to that letter is worth more at a hearing than any amount of recollection. If you would like help framing that letter or the complaint that follows it, our consumer protection practice can take it from there.

Frequently Asked Questions

Related guides and where to get help

If this is a live problem rather than background reading, our consumer protection practice handles these matters from Bengaluru, including for clients who cannot attend court in person. These guides go deeper on the neighbouring questions:

• Insurance Claim Denied or Underpaid? Your Rights
• Insurer Delaying Mediclaim on Suspicion: Your Rights
• Insurer Cancelling a Policy After Death: Your Rights