Cancel UPI AutoPay, NACH and card auto-debits in the right place

UPI AutoPay is the one that asks for your UPI PIN when it is set up. The merchant sends a request, your UPI app shows the amount, frequency and end date, and you approve it with the PIN. From then on the merchant can debit within those limits. It is common for streaming, apps, broadband and utility bills, and increasingly for SIPs and insurance.

NACH, which replaced the older ECS system and is called e-NACH when set up online, is a mandate registered directly against your bank account. You signed it on paper or approved it through net banking or a debit card when you took a loan, started a SIP through a fund house, or bought a policy. It carries most EMIs in India, which is why it is the rail with the most money on it and the least room to simply switch off.

Card standing instructions sit on a credit or debit card. Since the RBI's framework for recurring card payments came into force, a merchant cannot keep charging a saved card on a schedule unless you registered an e-mandate with an extra authentication step. The instruction is held by the card issuer and the merchant, and it never touches your UPI apps.

Take an illustrative household with six mandates, two on each rail. None is unusual. Two of them are no longer used: a language-learning app that has not been opened in four months, and a gym membership that stopped at the same time as the gym visits.

The six take ₹14,846 a month, ₹1,78,152 a year. By rail, NACH carries 79.1 percent of that money, card instructions 12.4 percent and UPI AutoPay 8.4 percent. The UPI mandate list, the one place most people check when they want to stop an auto-debit, holds the smallest share.

Open the bank statement and find the debit. Narrations differ by bank and change over time, so treat these as patterns to recognise rather than exact strings.

A UPI AutoPay debit usually starts with UPI and carries the merchant's UPI handle or name, a long UPI reference number, and often a word like mandate, autopay or recurring. A NACH debit usually shows NACH, ACH, ACH DR or ECS, followed by the name of the company that registered the mandate (a lender, a fund house, an insurer) or its payment processor, and sometimes a mandate reference number known as the UMRN. A card instruction does not appear on the bank statement at all if the card is a credit card: the bank only shows the card bill being paid. It appears on the card statement, under the merchant's name or the name of the payment gateway the merchant uses.

A UPI mandate is visible in the UPI app you approved it in, the one that asked for your PIN. If the merchant's own app set it up, the approval still happened in one of your UPI apps, and that is where the mandate is listed. GPay, PhonePe, Paytm and BHIM each keep a mandates or autopay section, usually reached from the profile or the payment history; the labels move between app versions, so look for the word autopay, mandates or recurring rather than a specific menu path. Open it, choose the mandate, and revoke it. The app asks for your UPI PIN to confirm, because revoking changes a permission you gave with that PIN.

If you have used more than one UPI app over the years, repeat this in each, including ones you no longer open. A mandate survives the app leaving your home screen. If you uninstalled one, reinstall it and register with the same mobile number and bank account: the mandate is attached to your UPI ID on that app, not to the phone.

Before each UPI AutoPay debit you should receive a pre-debit notification at least 24 hours ahead, as an app notification, SMS or both. That notice is the last clean point to act on the next debit. Once the debit has been executed, revoking stops the following ones, not that one. If you revoke inside the 24-hour window, whether that particular debit still goes through depends on how far it has progressed with the bank; assume it may, and check the statement.

To cancel a NACH mandate, start with the company that registered it, because it can close the mandate cleanly at its end. For a SIP, stop the SIP with the fund house or through the platform you invested on, and the mandate goes with it or can be cancelled afterwards. For an insurance premium, decide about the policy first, since stopping the debit without that decision can lead to a lapse.

Your bank is the second route. Many banks let you view and cancel NACH mandates in net banking, and every bank accepts a written request at the branch with your account number and the mandate reference. Keep the acknowledgement: it is your proof of the date you asked.

A loan EMI is different. The mandate was a condition of the loan, and the lender is entitled to the EMI whether or not the mandate exists. If you want to move the EMI to another account, ask the lender for a replacement mandate and cancel the old one only once the new one is registered. If you simply revoke it, the EMI is still due, the presentation fails, and the charges start.

Under the RBI's e-mandate framework for recurring card payments, a standing instruction on a card is registered with an additional authentication step, usually an OTP. Before each debit, the card issuer sends a pre-debit notification at least 24 hours ahead, and the notice is expected to give you a way to opt out of that debit or of the mandate. Above a threshold set by the RBI, a recurring debit needs your fresh authentication each time, which is why a large renewal sometimes stops and asks you to approve it.

There are two places to stop it. The first is the card issuer: most issuers now show registered e-mandates in net banking or the card app, with an option to withdraw. The second is the merchant: removing the card or cancelling the plan in your account on the merchant's site ends the instruction at the source. Doing both is not overkill for something you never want charged again.

Blocking or replacing the card is a poor substitute. It stops everything on the card at once, including instructions you want to keep, and a merchant may ask for the new card and resume. It also does nothing to the contract, which is the subject of the next section.

The order matters for three reasons. Cancelling the plan first keeps the access you have already paid for until the period ends. It ends the obligation, so nothing is owed when the next debit fails. And it lets the merchant close the mandate at its end, which is the cleanest cancellation of all. Then revoke the mandate on its rail, so that a retry or an error cannot succeed.

Plans with a minimum term are where revoking alone costs most. Suppose the learning app had been a 12-month plan billed monthly, with seven months left. Revoking the mandate stops the debits, but the terms may still make those seven months payable: ₹3,143. Only cancelling with the merchant, on whatever terms the plan allows, settles that.

If a debit lands after you have both cancelled and revoked, act quickly and in writing. For a UPI debit, raise a complaint on the transaction in the UPI app and with your bank. For a card, dispute it with the issuer. For NACH, write to your bank with the mandate reference and the date you asked for cancellation. Keep screenshots of the revoke confirmation and the merchant's cancellation email. If the bank does not resolve it within 30 days, or you disagree with its answer, you can complain to the RBI's Integrated Ombudsman online. The page on disputing an unauthorised transaction covers the steps in detail.

The hard part of this page is not the tapping. It is knowing, for each debit, what it is and which rail it runs on, across months of statements from more than one bank and card. Unyfy reads your bank and card transaction emails and, on Android, transactional SMS, with no manual entry. UPI handles are mapped to names from a merchant database of about 10,000 entries, and a debit seen by both SMS and email is counted once.

On Pro, the Fixed Expenses screen predicts what the coming month is already committed to, EMIs, SIPs, premiums and subscriptions included, with what is paid and what is left so far this month. Its Subscriptions list shows each recurring subscription with its amount and Due or Paid status, and the detail for each shows the usual payment days, so you can revoke before the next debit rather than after.

It never asks for your bank password or UPI PIN, and every payment is one you authorise. You cancel a mandate in the UPI app that set it up, or on its own rail using the steps above. Install Unyfy on Android, or on an iPhone use the web app at app.unyfy.co.in, which reads your bank's email alerts and statements.