UPI Mandate vs Debit Alert: How to Read Payment SMS

"I got an SMS saying a ₹15,000 UPI mandate was created. Has ₹15,000 gone from my account?" Usually not. The one-line fix is: a mandate is a permission, a block is money on hold, and only a debit alert ("debited", "Dr") means money has actually left, so check your account statement for a debit entry before you panic, and revoke any mandate you did not approve.

This guide shows how to read each type of payment message, what the rules require as of October 2026, and what to do when an alert does not match what you expected. For the steps to cancel a mandate, see our guide on how to cancel UPI AutoPay.

Why the messages are confusing

A single subscription or IPO application can trigger four or five messages from your bank, your UPI app and the merchant. They use similar words ("mandate", "authorised", "successful") for very different events. The safest habit is to sort every message into one question: did money leave, is money on hold, or is this only a permission?

The available balance in the SMS is your best quick check. A blocked amount reduces available balance but not the ledger balance; a debit reduces both.

The rules behind the alerts (as of October 2026)

RBI's e-mandate framework, consolidated in April 2026 as the Digital Payments – E-mandate Framework, 2026, governs recurring payments on cards, wallets and UPI. NPCI's UPI AutoPay rules apply it to UPI. The points that matter for reading alerts:

Under NPCI's October 2025 AutoPay enhancements, UPI apps were asked to let you see all active mandates linked to your account, not only the ones created in that app. Rollout varies by app, so also check your bank's own app or net banking.

IPO applications through UPI work differently. The exchange's sponsor bank sends a one-time mandate; when you approve it, your bank blocks the bid amount, and it is debited only on allotment. Our guide on IPO UPI mandate not received explains that flow.

Worked example: reading one month of alerts

Meera has ₹50,000 available in her savings account. She subscribes to a ₹499 monthly streaming plan using UPI AutoPay and, the same week, applies for an IPO through UPI.

Two lessons. First, the ₹15,000 in the mandate SMS never left her account; only ₹499 + ₹499 = ₹998 did. Second, the ₹14,500 IPO block made her available balance look ₹14,500 lower for six days, but the money came back in full. Over a year, the subscription costs ₹499 × 12 = ₹5,988, which is the number worth tracking in your budget, not the ceiling.

If the ceiling worries you, ask whether the merchant offers a fixed-amount mandate, or set a lower maximum where the app allows it.

Step-by-step: when an alert does not look right

In the first hour

1. Read the verb. "Created", "registered" or "approved" means permission; "blocked" means hold; "debited" or "Dr" means money left.
2. Check available balance in your bank app. Compare it with the amount in the message.
3. Open the UPI app's AutoPay or Mandates section. Find the mandate by merchant name. If you do not recognise it, choose Revoke or Cancel and confirm with your PIN.
4. If money was debited and you did not authorise it, call your bank's 24x7 fraud number from its official website or the back of your card, and report on 1930 or cybercrime.gov.in. Under RBI's customer liability rules in force until 31 December 2026, a third-party fraud reported within three working days means zero liability; see unauthorised transaction and zero liability.

On the first day

5. Match the debit to your statement. Look for narrations like "UPI-Mandate", "UPI/AutoPay", "NACH DR" or "SI". Our guide to reading a bank statement decodes these.
6. Save the evidence: the mandate SMS, the pre-debit alert, the debit alert, and screenshots of the mandate details (merchant, UMN or mandate ID, maximum amount).
7. Raise a dispute in the UPI app on the specific debit if it was not authorised or exceeded what you agreed.

If unresolved

8. Complain to your bank's grievance or nodal officer, quoting the UPI reference number and mandate ID.
9. Escalate to NPCI for UPI issues through "UPI Help" in your app or the dispute redressal section at npci.org.in.
10. Go to the RBI Ombudsman at cms.rbi.org.in (helpline 14448) if the bank does not resolve the complaint within 30 days or rejects it. Under the Integrated Ombudsman Scheme, 2026, file within 90 days of the bank's reply or response deadline. See bank not resolving complaint.

If a debit came after you had revoked the mandate, follow our guide on UPI AutoPay debited after cancel.

Ready-to-copy complaint message

Subject: Unauthorised / excess debit under UPI mandate - UPI Ref [number]

Dear Sir/Madam,

On [date], Rs [amount] was debited from my account ending [last 4 digits]
under a UPI mandate to [merchant name / UPI ID].
UPI Reference: [number]. Mandate ID / UMN: [if shown].

[Choose one]
- I did not create or approve this mandate.
- I approved a mandate for Rs [agreed amount], but Rs [debited amount]
  was debited.
- I did not receive a pre-debit notification before this debit.
- I had revoked / paused this mandate on [date] before the debit.

Please reverse Rs [amount], confirm the mandate is revoked, and share
the mandate registration details (date, channel, maximum amount).

Previous complaint number(s): [if any]
Name: [your name]   Registered mobile: [number]

What not to do

• Do not enter your UPI PIN to "receive" money or "verify" a mandate you did not start. Receiving money never needs a PIN.
• Do not call numbers in unsolicited SMS that say "mandate of ₹X created, call to cancel". Cancel only from your own UPI or bank app.
• Do not search the web for a "UPI customer care" number. Use the help section inside your app or your bank's official website.
• Do not block your whole account to stop one mandate unless it is fraud; revoke the mandate instead.
• Do not ignore pre-debit alerts. They are your last chance to opt out before the debit.
• Do not approve a high ceiling for a small fixed subscription if a lower one is offered.

Key takeaways

• Mandate = permission, block = money on hold, debit = money gone; the available balance and the word "debited" tell you which.
• As of October 2026, recurring debits need a pre-debit notification at least 24 hours before, with an option to opt out.
• Debits up to ₹15,000 run without your PIN; insurance, mutual fund and credit card payments up to ₹1 lakh.
• IPO and one-time mandates block funds, which are debited on allotment or released.
• Revoke unknown mandates at once, report unauthorised debits to your bank and 1930, and escalate to cms.rbi.org.in after 30 days.