Your New Rights From January 2027: RBI’s Mis-Selling Framework Explained in Plain Language

You apply for a loan and an insurance policy appears in the paperwork. A credit card is sold as “free,” but the fee waiver needs a spend target nobody mentioned clearly. A banking app flashes a loan offer with a countdown timer. An agent says a mutual fund is “from the bank,” though the bank is only distributing it. These are everyday grey zones. RBI’s final amendment directions on advertising, marketing, and sale of financial products — issued 15 June 2026 — are meant to shrink that grey zone.

At a glance Effective 1 January 2027 (not July 2026 — the draft date was extended). Covers commercial banks, small finance and payments banks, co-operative banks, housing finance companies, and most NBFCs. Core rules: explicit consent per product, no compulsory bundling, ban on dark patterns, suitability at the time of sale, and full refund plus compensation if mis-selling is established.

Date check Some headlines still say “from July 1.” That was the draft timeline. RBI’s final Press Release 2026-2027/460 sets commencement at 1 January 2027 so banks can fix apps, consent flows, and contracts. Until then, existing conduct rules apply — but the new playbook is already public.

What counts as mis-selling?

RBI defines mis-selling more broadly than “the agent lied.” A sale of the bank’s own product or a third-party product can be mis-selling in any of these cases:

• The product was unsuitable or inappropriate for your profile at the time of sale — even if you gave explicit consent.
• You were not given correct or complete information, or you were given misleading information.
• There was no explicit consent from you.
• Another product was compulsorily bundled with the one you asked for.
• Any other element that the relevant financial-sector regulator defines as mis-selling.

The suitability limb matters most for card and insurance pushers: signing a form does not automatically make an unsuitable product “okay.” Basic products that the institution’s policy treats as suitable for all customers can be exempt from strict profiling — but that is the bank’s policy burden, not a free pass for every add-on.

Consent: what must change on the form

Every financial product or service — bank-owned or third-party — needs your specific, informed consent. That can be a signed declaration, OTP approval, digitally recorded confirmation, or a clearly separated section in the agreement. Multiple products cannot share one clubbed “I agree.” The default on any interface must be “No” or “I do not agree.” Banks must keep proof of consent for one year after that product relationship ends.

• Each product on a loan or card journey must be listed separately so you can pick only what you want.
• Sale documents for the entity’s own products must be available in a regional language or a language you understand.
• After you apply, you should get a secure acknowledgement (SMS/email) with a phone number for queries.

No forced add-ons (loans, cards, insurance)

Compulsory bundling is banned. A regulated entity cannot make one product conditional on buying another — its own or a third party’s. Taking a personal loan should not force you into insurance only from the lender’s preferred partner. If cover is genuinely needed as a risk mitigant, you must be allowed to buy it from any provider. Lenders also cannot fund the purchase of an add-on out of your sanctioned loan facility without your explicit consent.

Credit-card angle Watch for add-on insurance, “complimentary” covers that renew paid, and fee-waiver stories that hide spend thresholds. Under the new framework, those extras need clear, separate consent — not a pre-ticked box buried in the card application.

Dark patterns banks can no longer use

RBI lists manipulative digital design patterns that push you into a sale. Familiar examples in banking apps and websites:

• False urgency — fake countdown timers on loan or card offers (genuine time-bound offers with real deadlines are a different story).
• Basket sneaking — paid extras added without clear permission.
• Confirm-shaming — wording that makes you feel guilty for saying no.
• Forced action — making you do something unnecessary to continue.
• Drip pricing — revealing charges only late in the journey.
• Bait-and-switch — promising one thing, delivering another.
• Nagging, trick wording, disguised ads, subscription traps, interface interference.

Agents, incentives, and sales hours

• DSAs, DMAs, and third-party reps cannot mislead you about who they work for or pretend to be bank employees.
• Outsourced sellers inside a branch must be visually distinguishable (clear on-person ID).
• Bank employees cannot directly or indirectly take sales incentives or commissions from third-party product providers.
• Sales calls and visits are restricted to 09:00–19:00; visits to your premises need explicit consent.
• Entities must keep updated DSA/DMA lists on their websites.

If you think you were mis-sold

Complain to the bank or NBFC within the timeline set by the relevant regulator. If no timeline is specified, you have 30 days from receiving the signed copy of the terms and conditions or agreement. Where mis-selling is established, the entity must refund the entire amount you paid for that product or service, intimate you about cancellation where applicable, and compensate you for loss under its approved policy.

Regulated entities must also seek post-sale feedback within 30 days of a sale (including random sampling). That feedback must come from a department that did not sell you the product — so the review is not run by the same sales team.

Checklist before you say yes

• Is this product compulsory or optional?
• Is it from the bank itself or a third party (insurer, AMC, etc.)?
• What are the fees, lock-in, exit terms, and penalties?
• Has any add-on been selected by default?
• Would you still buy this if the loan or card were approved without it?

What this means for CardHungry readers

The framework does not pick your credit card for you — it makes the sales journey less manipulative. Compare cards on fees, caps, and fit before you sit with an agent. When an add-on appears, treat it as a separate purchase decision. From January 2027, the rules back that instinct with clearer consent, bundling bans, and a refund path if mis-selling is proven.

Compare without the push

• Hdfc Millennia
• Sbi Cashback
• Axis Ace

How we sourced this Based on RBI Press Release 2026-2027/460 (15 June 2026), the Reserve Bank of India (Commercial Banks – Responsible Business Conduct) Second Amendment Directions, 2026 (effective 1 January 2027), and plain-language reporting in The Hindu Business Line and CorpLawUpdates. Always verify the latest text on rbi.org.in before relying on this for a complaint.