---
title: "Credit reports and credit bureaus: your rights and how to complain"
description: "Get your free credit report, fix wrong entries and claim Rs 100 a day for delays. Plain steps, helplines and templates."
url: "https://dpdpr.in/rights/credit-reports/"
canonical: "https://dpdpr.in/rights/credit-reports/"
site: "dpdpr.in"
updated: "2026-11-02"
disclaimer: "Independent reference, not legal advice. Not affiliated with the Government of India or MeitY."
---

# Credit reports and credit bureaus: your rights and how to complain

Plain-language help for ordinary people. General information, not legal advice. Helplines, portals and screen names were checked against official Government and regulator pages on 1 November 2026. Portals change: if a screen looks different, follow the words on the screen and the official guide linked in each step.

## What data they hold

- Every loan and credit card in your name, with repayment history.
- Enquiries made by lenders.
- Your PAN, address, phone numbers and date of birth.

## Your rights under current law

- Each credit information company must give you one free full credit report, with your score, once every calendar year (RBI, 2016).
- Your lender (credit institution) and the bureau together have 30 days to fix a wrong entry. If they take longer, you get Rs 100 for each calendar day of delay, paid within 5 working days of the fix (RBI, 2023).
- Credit information companies are covered by the RBI Integrated Ombudsman Scheme, 2026.

## Your DPDP rights once in force

Sections 11 to 14 of the DPDP Act (your rights) and the duties of companies in sections 4 to 10 start on **13 May 2027** (G.S.R. 843(E)). Until then, use the sector rules on this page. After that date you can use both.

From 13 May 2027 section 12 adds a general right to correction. Section 8(3) also requires accurate data where it is used for a decision about you or shared with another company.

- Access: a summary of your data and who it was shared with ([section 11](https://dpdpr.in/act/section-11/)).
- Correction, completion, updating and erasure ([section 12](https://dpdpr.in/act/section-12/)).
- Grievance redressal by the company, before going to the Board ([section 13](https://dpdpr.in/act/section-13/)).
- Nominate someone to act after your death or incapacity ([section 14](https://dpdpr.in/act/section-14/)).
- Withdraw consent, as easily as you gave it ([section 6(4)](https://dpdpr.in/act/section-6/)).

## Common problems

- A loan you never took.
- A closed loan still shown as open.
- Wrong late payment marks.
- Enquiries from lenders you never applied to.

## Evidence to keep

- The credit report PDF, with the wrong entry marked.
- No dues certificate or closure letter.
- Your dispute number and date.
- Any SMS or email about a loan you never took.

See the full [evidence checklist](https://dpdpr.in/rights/evidence-checklist/).

## How to approach, step by step

Go in this order. Start with the company. Move to the next step only when the time limit has passed or the reply is not good enough. If money was lost or you were threatened, go to 1930 or the police first.

### Complain to the bank first, then the RBI Ombudsman

From 1 July 2026 the Reserve Bank Integrated Ombudsman Scheme, 2026 applies. It is free. It covers banks, many NBFCs, non bank wallets and prepaid cards, and credit information companies. You must complain to the bank or company first.

**Keep this ready before you start:**

- Your name, mobile number, email and full postal address.
- Name of the bank or company, and the branch if relevant.
- The complaint number and date of your complaint to the bank, and a copy of it.
- Account, card, loan or transaction details.
- Transaction date and reference number.
- The bank's reply, if any.
- A short account of what happened, your loss, and what you want (refund, correction, compensation).
- Supporting documents.

1. Complain to the bank in writing. Use its official app, website complaint form, email, or a letter at the branch.
2. Get a complaint number or written acknowledgement. Save it with the date.
3. Wait 30 days (or longer if RBI, NPCI or card network rules give a longer time for your type of issue).
4. If there is no reply in that time, or you are not happy with the reply, you can go to the RBI Ombudsman.
5. Do it within **90 days** from the end of that waiting time, or from the bank's last reply, whichever is later. Under the 2021 scheme this was one year; under the 2026 scheme it is 90 days.
6. Open [cms.rbi.org.in](https://cms.rbi.org.in). The portal shows a security check first.
7. Choose to file a new complaint. Fill the details asked: your details, the bank, your earlier complaint number, the transaction and what you want. We have not described each screen because we could not open the portal to check it; follow the labels shown.
8. Upload your complaint to the bank, the bank's reply and your evidence.
9. Submit. Write down the complaint number shown. Save it with your mobile number. You need both to track.
10. To track or withdraw, go to the **Track a complaint** tab on cms.rbi.org.in.
11. Other ways to file: email to crpc@rbi.org.in, or post a signed complaint form to Centralised Receipt and Processing Centre, Reserve Bank of India, Central Vista, Sector 17, Chandigarh 160017.
12. For help, call the RBI Contact Centre on **14448**. The voice menu works 24x7. Staff answer 8 AM to 10 PM, Monday to Saturday, in English, Hindi and ten regional languages. You cannot file a complaint by phone.
13. If the Ombudsman passes an Award in your favour, send the bank a letter accepting it within 30 days. The bank must then comply.
14. If you disagree with an Award, you can appeal to the Appellate Authority within 30 days of receiving it.

Checked on 1 November 2026 against: [RBI: Reserve Bank Integrated Ombudsman Scheme, 2026 (FAQs)](https://www.rbi.org.in/CommonPerson/english/Scripts/FAQs.aspx?Id=3407), [RBI: text of the Integrated Ombudsman Scheme, 2026](https://rbidocs.rbi.org.in/rdocs/content/pdfs/SCHEME16012026_A.pdf), [RBI Complaint Management System (CMS)](https://cms.rbi.org.in/).

### File a complaint on cybercrime.gov.in

The National Cyber Crime Reporting Portal takes complaints about online fraud, hacking, fake profiles, harassment and more. Your complaint goes to the police of your State or Union Territory. The screen names below come from the portal's FAQ and the Ministry of Home Affairs citizen manual. The portal can change. If a screen looks different, follow the words on the screen.

**Keep this ready before you start:**

- Date and time of the incident.
- Incident details in your own words. The portal checklist asks for at least 200 characters and no special characters such as # $ @ ^ \* \` ~ | !
- A photo or scan of a national ID (Voter ID, Driving Licence, Passport, PAN or Aadhaar) in .jpg, .jpeg or .png, not more than 5 MB.
- For money fraud: bank or wallet name, 12 digit transaction ID or UTR, date and amount.
- Evidence files such as screenshots, not more than 10 MB each.
- If known: the other person's mobile number, email, bank account, website link or social media handle.

1. Open [cybercrime.gov.in](https://cybercrime.gov.in) in a browser.
2. Click **File a complaint**.
3. Read the message. Tick **I Accept**.
4. Click **Report Other Cyber Crime**. (For sexual content involving women or children, use the women and child section instead.)
5. Type your name in **User Name**. Type your mobile number.
6. Click **Get OTP**. Type the OTP you receive. It is valid for 30 minutes.
7. Fill the security answer. Click **Submit**.
8. In **Incident details**, choose the **Category of complaint**. For money loss choose Online Financial Fraud. For fake profiles or harassment choose Online and Social Media Related Crime.
9. Choose the **Sub-Category** that fits best.
10. Enter the approximate date and time. If you are late, fill **Reason for delay in reporting**.
11. Choose **Where did the incident occur?** (for example a phone call, SMS, WhatsApp, a website or an app).
12. Upload your evidence files.
13. Write what happened in the details box. Say who contacted you, from which number, what they said, what you shared or paid, and when.
14. Click **Save and Next**.
15. Add suspect details if you have them: name, mobile number, bank account, UPI ID or website. Click **Save & Next**.
16. Fill your own details and address. Choose your State, District and Police Station.
17. Upload your ID proof. Click **Save & Preview**.
18. Check everything. Tick **I Agree**. Click **Confirm & Submit**.
19. Write down the **Complaint ID** shown on screen. You also get it by SMS and email. It is a complaint number, not an FIR number.
20. Click **Download PDF** and save the file in a safe folder.
21. To check progress later, log in the same way and click **Check Status**.
22. If you get no action, or are not happy with what the police did, contact the cyber crime grievance officer of your State or Union Territory listed on the portal. You can also visit your local police station with the PDF and ask for an FIR.

Checked on 1 November 2026 against: [National Cyber Crime Reporting Portal: FAQ](https://cybercrime.gov.in/Webform/FAQ.aspx), [National Cyber Crime Reporting Portal: checklist before filing](https://www.cybercrime.gov.in/Webform/Crime_AuthoLogin.aspx), [I4C (Ministry of Home Affairs): National Cybercrime Reporting Portal and 1930](https://i4c.mha.gov.in/ncrp.aspx).

## Ready-to-use complaint

Copy, fill the brackets, and send it through the company's official channel. Keep a copy.

To: \[Credit bureau\] dispute desk, and \[lender\] Subject: Dispute: wrong entry in my credit report, PAN \[last 4 characters\] My report dated \[date\] shows \[account / loan\] which \[I never took / was closed on date\]. Proof attached. Please correct it within 30 days. If it takes longer, I claim compensation of Rs 100 per day under RBI's circular of 26 October 2023. My bank account or UPI ID for compensation is \[details\]. \[Name\], \[mobile\], \[date\]

## Time limits

- Fix within 30 days of your dispute (lender 21 days, bureau the rest).
- Compensation paid within 5 working days of the fix.
- RBI Ombudsman: within 90 days after the waiting period.

## If this happened to you

- [\*\*My credit report shows a loan I never took\*\*A loan or card you never applied for appears on your credit report.](https://dpdpr.in/rights/scenarios/loan-i-never-took/)
- [\*\*A credit card was issued and activated in my name without my consent\*\*A card you never asked for arrived, was activated, or appeared on your credit report.](https://dpdpr.in/rights/scenarios/credit-card-issued-without-consent/)
- [\*\*My credit report shows loans or enquiries I never made\*\*Your credit report lists a loan, card or enquiry you do not recognise.](https://dpdpr.in/rights/scenarios/credit-report-unknown-loans/)
- [\*\*I checked my credit score on a marketplace app and now banks and agents call nonstop\*\*After using a free credit score or loan marketplace app, loan and card calls started.](https://dpdpr.in/rights/scenarios/credit-score-app-calls/)
- [\*\*Someone used my PAN or Aadhaar for a GST number, a company or a loan\*\*A GST registration, company, loan or tax notice shows up on your PAN or a family member's Aadhaar.](https://dpdpr.in/rights/scenarios/pan-aadhaar-misused/)

## Official sources

- [RBI: free annual credit report to individuals (1 September 2016)](https://www.rbi.org.in/commonperson/English/Scripts/Notification.aspx?Id=1884)
- [RBI: compensation for delayed correction of credit information (26 October 2023)](https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=12554)
- [RBI: Reserve Bank Integrated Ombudsman Scheme, 2026 (FAQs)](https://www.rbi.org.in/CommonPerson/english/Scripts/FAQs.aspx?Id=3407)
- [Digital Personal Data Protection Act, 2023 (MeitY copy of the Gazette)](https://www.meity.gov.in/static/uploads/2024/02/Digital-Personal-Data-Protection-Act-2023.pdf)
- [G.S.R. 843(E): start dates for the Act](https://www.meity.gov.in/static/uploads/2025/11/c56ceae6c383460ca69577428d36828b.pdf)