RBI mis-selling rules 2026: consent, audits, refunds

Why July 1, 2026 is a hard deadline

From July 1, 2026, the Reserve Bank of India’s enhanced framework on mis-selling moves from draft intent to enforceable expectations across sales channels. The regulatory focus shifts from basic disclosure to demonstrable customer choice, backed by evidence. The Finance Minister has also publicly framed mis-selling as an offence, not a training lapse or a “rogue agent” issue, and backed tighter RBI guidance with institutional accountability.

The changes matter because they raise the compliance burden on product distribution and increase the financial cost of weak controls. Banks and other regulated entities will need to prove how consent was captured, how suitability was assessed, and how customer interactions were recorded and reviewed. The framework also makes redress more explicit by linking confirmed mis-selling to mandatory refunds and compensation.

What RBI issued and when

The RBI released draft directions on February 11, 2026: the All India Financial Institutions (AIFIs) - Responsible Business Conduct Amendment Directions, 2026. The draft was opened for public comments, with stakeholders given time until March 4, 2026 to send feedback, after which the guidelines were to be finalised.

The proposed effective date is July 1, 2026. Separate reporting around the responsible business conduct amendments indicates the rollout aims to reset sales behaviour across branches, tele-calling, and digital journeys.

Which institutions and products are in scope

The draft framework applies to All India Financial Institutions (AIFIs), including NABARD, National Housing Bank, EXIM Bank and SIDBI. Reporting around the broader set of draft rules also points to applicability across regulated entities, including banks, housing finance companies, rural and urban co-operative banks, and non-banking financial companies (NBFCs), from July 1.

There is also a separate mention that the full refund plus compensation guidelines will apply to commercial banks, excluding small finance banks, payment banks, regional rural banks, and local area banks, from July 1, 2026.

In terms of products, the rules target the sale and distribution of retail financial products including insurance, loans, mutual funds, and other third-party investment products sold through bank-led channels.

A tighter definition of mis-selling, even if consent exists

For the first time within this framework, the RBI draft sets out a detailed definition of mis-selling under Clause 3A. An institution would be considered to have mis-sold a product if it sells a product unsuitable for a customer’s profile even where explicit consent exists, provides incomplete or misleading information, completes a sale without explicit customer consent, or bundles an additional product with one the customer actually requested.

A key shift is that customer consent alone would no longer shield an institution if the product itself is inappropriate for the customer’s age, income, education or financial literacy, and risk tolerance or risk appetite. This removes a common defence where a signature or acknowledgement was treated as final proof of customer choice.

Separate written consent for each product, not bundled approvals

The framework requires separate, explicit written consent for each financial product. Oral consent alone is insufficient. Consent documentation must specify the product name, key features, fees, and risks. Bundling products without itemised consent is prohibited.

In practice, this means evidence must be product-by-product. A single bundled acknowledgement for multiple add-ons is not meant to qualify as valid consent for each product. The intent is to ensure the customer’s acceptance is clear and attributable to a specific product, rather than embedded in combined paperwork.

Suitability and risk profiling become central to sales

The draft places suitability assessment at the centre of product sales. Clause 32ZF proposes that institutions determine whether a product is suitable and appropriate before marketing or selling it.

Institutions must conduct documented risk profiling for all customers before product recommendation. Profiling must assess income, investment horizon, existing liabilities, financial goals, liquidity needs, and risk appetite. Product recommendations must explicitly reference the customer’s profile.

If there is a deviation from suitability, the process requires supervisory sign-off and documented justification. This is designed to prevent suitability exceptions becoming routine or being used to push higher-commission products.

No compulsory bundling and closer scrutiny of cross-sell

The draft addresses “compulsory bundling” and prohibits it. RBI’s definition treats compulsory bundling as making a product or service conditional on availing another product or service. A commonly cited example is tying insurance or other add-ons to loan approval.

The rules also state that a bank cannot bundle the sale of a third-party product with its own product. Where cross-sell occurs, the institution must obtain and record explicit consent, with clear separation between products.

Dark patterns in digital sales are explicitly targeted

The draft rules ban “dark patterns” in digital flows. RBI describes these as deceptive design practices that manipulate the user experience and can lead to false advertisements and misinformed decisions.

The reporting around the draft highlights expectations for user testing and periodic audits of interfaces that may nudge customers into unintended actions. This brings digital journeys under the same evidence-driven lens applied to branch and call-centre distribution.

Refunds, compensation, and remediation timelines

Where mis-selling is confirmed, refunds and compensation are mandatory. Refunds cover principal plus accrued interest or returns. Compensation is set at 10% of the refund amount, with a minimum of ₹500 and a maximum of ₹50,000 per violation.

Institutions must remediate within 90 days of a finding. Separately, the draft also refers to compensation for losses arising from the mis-sale in accordance with institutional policy. Taken together, the direction is toward full financial reversal of the transaction plus an additional compensation layer once mis-selling is established.

Recording, retention, and much larger audit sampling

All customer interactions must be recorded and retained for 7 years. This includes calls, chats, emails, and in-person meetings. Call recordings must be transcribed and flagged for suitability deviations.

Internal monitoring requirements tighten sharply. Monthly audit sampling must increase from 2% to a minimum 25% as per RBI guidance. Quarterly third-party audit reviews are mandated, raising expectations not just on volume of checks but also on independent oversight.

Complaints, disclosure, and escalation to ombudsman or IRDAI

The framework requires institutions to publish quarterly mis-selling violation statistics, including number of cases, categories, and amounts remediated. It also creates stricter complaint handling pressure: complaints unresolved within 30 days auto-escalate to the RBI Banking Ombudsman or IRDAI.

Separately, reporting notes that RBI has launched the Integrated Ombudsman Scheme 2026, which comes into effect on July 1 and is expected to cover commercial banks, state and urban co-operative banks, and NBFCs, enabling complaints to be resolved without legal battles.

Key thresholds and dates at a glance

What it means for banks, NBFCs, and distributors

The draft increases the operational burden of selling and distributing financial products. Sales scripts, consent capture, documentation, and post-sale audit trails will need to align with suitability-driven selling rather than signature-led selling. The combination of recordings, transcription, and higher audit sampling also makes it harder for weak processes to remain undetected.

Distribution oversight is also tightened. Reporting around the draft notes requirements for banks to display updated lists of Direct Selling Agents on their websites and ensure that agents operating within branches are clearly distinguishable from bank employees. This aims to improve accountability across third-party distribution, where mis-selling complaints have been persistent.

Conclusion

RBI’s July 1, 2026 framework raises the bar on how financial products are sold in India by demanding product-by-product consent, documented suitability checks, bans on compulsory bundling and dark patterns, and mandatory refund plus compensation in confirmed mis-selling cases. The next milestones remain procedural and compliance-driven: finalisation after the comment process and operational readiness across branches, call centres, and digital journeys ahead of July 1, 2026.