22.9 Lakh CIBIL Complaints in FY25 — 25% Were the Bureau’s Own Errors
An unauthorized inquiry on your CIBIL report means a lender pulled your credit report without your knowledge or consent. Each unauthorized inquiry costs you 5-10 CIBIL points, flags you as “credit hungry” to future lenders, and stays on your report for 2 years.
The problem is bigger than most people realize. CIBIL received 22.9 lakh complaints in FY 2024-25. Of those, 5.8 lakh (25%) were attributed to CIBIL’s own data errors — not lender mistakes or fraud. The most common cause is “data mixing” where another person’s credit information overlaps with your report due to similar names or PAN entry errors.
Here is the complete dispute process with exact timelines, the little-known Rs 100/day penalty CIBIL must pay if it misses the deadline, and the escalation path to the RBI Ombudsman.
Step 1: Identify the Unauthorized Inquiry
Where to find inquiries on your report
Log in to cibil.com/freecibilscore and download your full Credit Information Report (CIR). Navigate to the Enquiry Information section at the bottom. Each inquiry lists:
- Enquiry Date: When the lender pulled your report
- Member Name: The lender (bank, NBFC, or fintech)
- Enquiry Purpose: Loan type (personal loan, credit card, home loan, etc.)
- Enquiry Amount: The loan amount applied for
How to identify unauthorized entries
Compare each inquiry against applications you actually made. Flag any entry where:
- You have never heard of the lender named
- The date does not match any application you submitted
- The loan type or amount is inconsistent with anything you applied for
- The inquiry appeared after you stopped applying for credit
Check all 4 bureaus — not just CIBIL
The same fraudulent application may trigger inquiries at different bureaus. A lender might pull your report from Experian or CRIF High Mark instead of (or in addition to) CIBIL. Check all four:
| Bureau | Dispute Portal | Free Report |
|---|---|---|
| TransUnion CIBIL | cibil.com (online dispute form) | 1x/year free |
| Experian | experian.in (dispute center) | Unlimited free |
| Equifax | equifax.co.in (consumer dispute) | 1x/year free |
| CRIF High Mark | crifhighmark.com (dispute form) | 1x/year free |
Step 2: Determine the Cause
Not all unauthorized inquiries are fraud. The three common causes require different responses:
Cause 1: Data Mixing Error (Most Common)
Another person’s inquiry got attached to your report because of similar name, DOB, or a PAN entry error by the lender. This is a bureau infrastructure problem.
How to identify: The lender name may be unfamiliar, the loan type does not match your profile, or the inquiry appeared without any preceding event (no KYC sharing, no app signups).
Response: Standard dispute process (Step 3 below). No police complaint needed.
Cause 2: Loan Agent Fraud
A loan agent or DSA (Direct Selling Agent) submitted an application using your KYC documents — often collected for one purpose but used for another. Common with agents who “help” you check loan eligibility.
How to identify: The lender is one you may have interacted with, but the application date or loan type doesn’t match what you discussed.
Response: Dispute process + written complaint to the lender’s grievance officer + complaint to the lender’s regulator (RBI for banks/NBFCs, SEBI for broker-linked lending).
Cause 3: Identity Theft
Someone used stolen or leaked PAN/Aadhaar documents to apply for credit in your name.
How to identify: The lender is unknown, the loan type is unusual for your profile, and you have reason to believe your documents may have been compromised (data breach, lost documents, phishing incident).
Response: Dispute process + cyber crime complaint at cybercrime.gov.in + Aadhaar biometric lock immediately + contact the lender to block any pending disbursement.
Step 3: File the Dispute (Day 0)
On CIBIL
- Log in to cibil.com and navigate to your dashboard
- Go to Dispute Centre or Raise a Dispute
- Select the specific inquiry entry you are disputing
- Choose reason: “I did not apply for this loan/credit”
- Add details: “This inquiry was not authorized by me. I have never applied with [Lender Name] for any credit product. Request removal of this unauthorized inquiry from my report.”
- Submit — you will receive a dispute reference number via email
- Screenshot everything — your report, the dispute submission, the reference number
On other bureaus (if applicable)
Repeat the process on each bureau where the unauthorized inquiry appears. Each bureau resolves disputes independently — removal at CIBIL does not fix Experian, Equifax, or CRIF.
Step 4: Contact the Lender Directly (Day 0-3)
Do not wait for the bureau dispute process — contact the lender simultaneously.
- Call the lender’s customer care and request to speak with the fraud/compliance department
- Inform them an unauthorized inquiry was made under your PAN
- Request they confirm whether a loan was disbursed against this application
- If a loan was disbursed, request an immediate freeze on the account
- Ask the lender to submit a correction to CIBIL confirming the inquiry was unauthorized
- Get the complaint reference number in writing (email confirmation)
This parallel approach often resolves faster than waiting for the bureau dispute chain. Some lenders will proactively correct the bureau record within 7-10 days when contacted directly about fraud.
Step 5: The Resolution Timeline (RBI-Mandated)
| Phase | Who Is Responsible | Deadline | What Happens |
|---|---|---|---|
| Dispute filed | You → CIBIL | Day 0 | Dispute acknowledged, reference number issued |
| CIBIL forwards to lender | CIBIL → Credit Institution | Day 1-2 | Lender receives dispute notification |
| Lender investigates and responds | Credit Institution | 21 days from dispute date | Lender verifies whether inquiry was authorized |
| CIBIL processes update | CIBIL | 9 days after lender response | Bureau updates your report |
| Total resolution deadline | Combined | 30 days from dispute date | Must be fully resolved |
What actually happens in practice
The formal timeline says 30 days. Real-world experience says 45-50 days for unauthorized inquiry removal. The reasons:
- Smaller NBFCs and fintechs often do not respond within 21 days
- CIBIL’s processing of the update can extend beyond 9 days
- If the lender disputes your claim (says the inquiry was authorized), additional back-and-forth adds weeks
During this entire period, the unauthorized inquiry continues dragging your score down. There is no “provisional removal” mechanism in India — the inquiry stays on your report until the dispute is formally resolved.
Step 6: The Rs 100/Day Penalty (Day 31+)
This is where most consumers miss their leverage.
Under the RBI Framework for Compensation (mandated under the Master Direction on Credit Information Reporting, January 2025):
If a credit bureau fails to resolve a dispute within 30 days, it must pay the complainant Rs 100 per day of delay.
The compensation must be credited to your nominated bank account within 5 working days of the complaint being resolved.
How to invoke the penalty
Day 31 (if dispute is still unresolved):
- Log in to cibil.com and check dispute status
- If still showing “pending” or “in progress,” send a written email to CIBIL’s grievance officer
- Reference: “RBI Master Direction – Reserve Bank of India (Credit Information Reporting) Directions, 2025, Framework for Compensation”
- State: “My dispute filed on [date] with reference number [number] remains unresolved beyond the mandated 30-day period. I am entitled to compensation of Rs 100 per day of delay as per the RBI Framework for Compensation. Please resolve the dispute and credit the applicable compensation to my bank account [details].”
What if CIBIL ignores the penalty claim?
Escalate to the RBI Ombudsman (Step 7). The ombudsman has the authority to direct CIBIL to pay compensation. Most consumers never reach this stage — the threat of ombudsman escalation usually accelerates resolution.
Step 7: RBI Ombudsman Escalation (If Needed)
If the 30-day deadline passes without resolution and CIBIL has not responded to your compensation request:
- Visit cms.rbi.org.in (RBI Complaint Management System)
- Select Credit Information Company as the entity type
- Select TransUnion CIBIL (or the relevant bureau)
- Fill in dispute details including:
- Original dispute reference number
- Date of dispute filing
- Date of missed deadline
- Screenshots of the unauthorized inquiry
- Screenshots of your dispute submission and status
- Submit the complaint
This process is completely free. No lawyer is needed. RBI typically responds within 30-45 days and has the authority to direct the bureau to resolve the dispute and pay compensation.
If You Suspect Identity Theft: Additional Steps
If the unauthorized inquiry appears to be fraud (not a data mixing error):
Immediate actions (Day 0)
- Lock your Aadhaar biometrics via the mAadhaar app — step-by-step guide here
- File a cyber crime complaint at cybercrime.gov.in — this creates an FIR-equivalent record
- Contact the lender named in the inquiry and request details of any disbursement
- File disputes with all 4 credit bureaus
Protective actions (Day 1-7)
- Check all 4 bureau reports for additional unauthorized entries
- Enable SMS alerts on all bank accounts if not already active
- Change passwords on all financial apps
- File a PAN grievance at the Income Tax e-filing portal if you suspect PAN misuse
Follow-up actions (Day 30+)
- Verify dispute resolution across all bureaus
- Check for new unauthorized entries that may have appeared during the dispute period
- Invoke Rs 100/day compensation if any bureau missed the 30-day deadline
The Impact of Unauthorized Inquiries on Your Credit
| Number of Unauthorized Inquiries | Approximate CIBIL Score Impact | Loan Approval Risk |
|---|---|---|
| 1 inquiry | -5 to -10 points | Minimal unless borderline score |
| 2-3 inquiries | -10 to -30 points | Moderate — lenders see “multiple applications” |
| 4+ inquiries in 6 months | -20 to -40 points | High — flagged as “credit hungry,” higher rejection rates |
The score impact is bad enough. But the perception impact is worse. Lenders reviewing your report see every inquiry. Three or more inquiries in the last 6 months raises a red flag regardless of your score — the lender assumes you are desperate for credit or have been rejected elsewhere.
This is why unauthorized inquiries can cost you more than just points — they can cost you a home loan approval or interest rate.
Prevention: How to Stop Unauthorized Inquiries Before They Happen
| Action | Cost | What It Prevents |
|---|---|---|
| Lock Aadhaar biometrics | Free | Biometric eKYC-based loan applications |
| Never share PAN photos with unverified agents | Free | Agent-submitted unauthorized applications |
| Use masked Aadhaar (last 4 digits only) | Free | Full Aadhaar-based eKYC fraud |
| Monitor all 4 bureaus quarterly | Free | Catches unauthorized entries within 90 days |
| CIBIL Alerts (paid) | Rs 800-1,200/year | Real-time inquiry detection on CIBIL |
| Register on DND (call 1909) | Free | Reduces phishing calls disguised as loan offers |
The single most effective prevention step: lock your Aadhaar biometrics today. It takes 2 minutes, costs nothing, and blocks the most common vector for unauthorized credit applications in India.
The Dispute Checklist
Use this checklist to track your dispute from filing to resolution:
- Downloaded full CIBIL report and identified unauthorized inquiry
- Screenshotted the report and specific inquiry entry
- Filed online dispute at cibil.com with dispute reference number
- Filed disputes at other affected bureaus (Experian, Equifax, CRIF)
- Contacted lender directly — confirmed whether loan was disbursed
- Locked Aadhaar biometrics (if suspected fraud)
- Filed cyber crime complaint at cybercrime.gov.in (if suspected fraud)
- Day 21: Checked if lender responded to bureau
- Day 30: Checked dispute resolution status
- Day 31+: Sent Rs 100/day compensation request to CIBIL (if unresolved)
- Day 45+: Escalated to RBI Ombudsman at cms.rbi.org.in (if still unresolved)
- Verified inquiry removed from report after resolution
- Checked for new unauthorized entries post-resolution
Related Guides
- CIBIL Alerts vs Free Apps: What Catches Fraud First? — paid CIBIL Alerts detect unauthorized inquiries on Day 0. Free apps take 30 days. Full comparison
- CIBIL vs Experian: Why Scores Don’t Match — an unauthorized inquiry may appear on one bureau but not others. Know which bureau to dispute
- Dispute Errors on Credit Report: Process & Templates — comprehensive dispute guide covering all error types, not just unauthorized inquiries