UPI AutoPay & e-mandates: RBI's rules and how to stop leaks
RBI's e-mandate framework brings 24-hour pre-debit alerts and OTP limits. Learn what it means for UPI AutoPay and how to audit forgotten subscriptions.
If you have ever opened your bank statement and wondered why ₹649 left your account for an app you barely open, you have met the quiet side of UPI AutoPay and e-mandates. RBI's consolidated e-mandate framework, reported in 2026, puts more control and more alerts in your hands. Here is what it means in plain terms.
What is an e-mandate?
An e-mandate is a standing instruction you give once, so a merchant can pull money from your card, wallet or UPI account on a schedule. Think OTT and DTH plans, SIPs, insurance premiums, EMIs, broadband and electricity bills, and credit card bill auto-pay.
What the framework says
Based on reports of the framework, these are the main points:
- Extra authentication at setup. You register the mandate once, and it is activated only after an additional authentication factor (such as an OTP or UPI PIN) is validated.
- Up to ₹15,000 without a fresh OTP each time. After that one-time setup, recurring payments up to ₹15,000 can go through without an OTP every month. Above ₹15,000, extra authentication is generally needed.
- Higher ceiling for selected categories. Insurance premiums, mutual fund investments and credit card bills have a higher limit of ₹1 lakh without additional authentication, a relaxation first announced in December 2023. Reports differ on the exact conditions, so check your bank's terms for your own case.
- Pre-debit alerts at least 24 hours ahead. Your bank should tell you the amount and details before the money moves, so you can cancel or opt out. You can usually choose SMS or email. FASTag and NCMC auto-recharges are exempt from the pre-alert.
- No extra fee for e-mandate services.
- You stay in control. You can edit, pause or cancel a mandate, using additional authentication, and merchants must state how long a mandate is valid when you register.
A related proposal for prepaid instruments (wallets) was reported as a draft, so it is not final yet.
Where the money really leaks
Mandates are convenient, which is exactly why they hurt. Three patterns show up often:
- The free trial that was not free. You sign up for a ₹1 trial, and the real plan of ₹499 a month starts quietly.
- The forgotten overlap. Two music apps, three video apps, plus a cloud storage plan. Each one is small, together they can cross ₹1,500 a month.
- Annual renewals. A ₹2,400 yearly charge hits once and your monthly budget has no room for it.
A family paying ₹1,800 a month in forgotten subscriptions is spending ₹21,600 a year, enough for a month of rent in many cities.
A 20-minute mandate audit
- Open your UPI app and look at the AutoPay or mandates section. List every active one.
- Scan the last three months of your bank and card statements for repeating amounts.
- For each item ask: did I use this in the last 30 days?
- Cancel what you do not use. Pause what you might need later.
- Note renewal dates in a calendar, and set aside a small monthly amount for annual charges.
- When a pre-debit alert arrives, read it. That 24-hour window is your chance to stop a charge.
Practical takeaway
- Treat every pre-debit alert as a decision, not noise.
- Keep a single list of recurring payments with amount and date.
- Review it on salary day, every month.
This is general information, not financial advice.
How Dhuddu helps
Dhuddu is a free expense tracker for India. It can read your bank alerts from Gmail or import your statements, so repeating debits are easy to spot. You can also add recurring payments and set reminders so renewals never surprise you, and budgets show how much room is left each month. Try it at dhuddu.in or on Google Play.