Three of India's Four Credit Bureaus, Fined the Same Day

On 4 September the Reserve Bank of India published four penalty orders on the same day. Three of them were against credit bureaus, and all three carried the same charge.

TransUnion CIBIL, CRIF High Mark and Equifax were each fined for failing to credit compensation to the bank accounts of eligible complainants within the prescribed period. The compensation in question is the money those consumers were already owed because their credit records had been corrected too slowly.

They were penalised for being late with the payment for being late.

The rule they broke

In October 2023 the RBI issued a circular with an unlovely name and a simple mechanism: the Framework for compensation to customers for delayed updation and rectification of credit information. It took effect six months later, on 26 April 2024.

The framework works in stages. A consumer complains that their credit information is wrong. The lender has 21 calendar days to send the corrected information to the bureaus. The bureau has 30 calendar days from the complaint to resolve it. If it is not resolved in 30 days, the consumer is owed 100 rupees for every further day of delay.

Then comes the clause that produced these three orders. The compensation "shall be credited to the bank account of the complainant within five (5) working days of the resolution of the complaint."

That is the step all three failed. Not the correction. Not the deadline for the correction. The transfer of the small sum owed for missing the deadline for the correction.

Three fines, one charge, a 22-fold gap

The amounts are where it gets interesting.

TransUnion CIBIL was fined 26,82,800 rupees. CRIF High Mark 6,89,600. Equifax 1,19,400. The three together come to 34,91,800 rupees, about 34.9 lakh, and CIBIL alone accounts for 76.8% of that. Its penalty is 22.5 times the size of Equifax's.

The orders do not explain the difference. Each records the same single sustained charge, in near-identical language, following a statutory inspection of the company's financial position as at 31 March 2025 and a personal hearing. Nothing in any of the three says how many complainants were affected, how late the payments were, or how the figure was arrived at.

One arithmetic observation, offered as arithmetic and nothing more. Each of the three penalties is an exact multiple of 100 rupees: 26,828, 6,896 and 1,194 hundreds respectively. The framework the companies breached sets compensation at 100 rupees per day. Whether the RBI derived the penalties from a per-day or per-instance count is not stated anywhere in the orders, and HaiPay is not asserting that it did.

Why a small fine is worth reading

The sums are small, and treating the size of the fine as the story would miss what the orders actually document.

India runs four registered credit information companies, and a credit report from them gates access to a personal loan, a credit card, a co-branded buy-now-pay-later line and increasingly a rental agreement. The country's digital lending market runs on those files. When the record is wrong, the framework is the consumer's only automatic remedy, and it is small by design: 100 rupees a day is meant to be a nuisance that makes the process work, not a windfall.

The orders establish that at three of the four bureaus, the nuisance itself was not being paid on time. A remedy that is not delivered on schedule is a remedy that has to be chased, which is exactly the friction the framework existed to remove.

There is a second reading available, and it is fairer to the companies. The framework was less than a year old at the inspection date. Building a system that identifies eligible complainants, calculates a per-day amount and pushes money to a bank account within five working days is real engineering, and doing it late is a different failure from not doing it.

What HaiPay could not establish

How many consumers were affected, or how much compensation reached them late. No order gives a count, a sum or a delay length.

Why the three amounts differ by so much. The orders are silent, and HaiPay did not contact the RBI or any of the three companies.

Whether Experian, the fourth registered credit information company, was penalised. HaiPay scanned RBI press release identifiers 63512 to 63535, the contiguous block containing all four orders published that day, and found no order against Experian. That is a scan of one block of identifiers, not a search of the RBI's full archive, and it is not evidence that no such order exists elsewhere or at another time.

The count of four bureaus itself needs a caveat. HaiPay could not retrieve a current register of credit information companies from the RBI website; the figure comes from an RBI report that names the four, two of which have since been renamed, as CIBIL became TransUnion CIBIL and High Mark became CRIF High Mark.

The fourth order in that block, against Sammaan Finserve Limited, is unrelated to the compensation framework. It concerns a failure to report a borrower's credit information to the Central Repository of Information on Large Credits.

What to watch

Whether Experian receives a comparable order. Three of four bureaus failing the same clause after the same inspection cycle suggests a systemic finding rather than three coincidences.

Whether the RBI ever publishes the compensation totals. The framework generates a natural statistic, the amount paid out for delayed credit corrections, and nobody currently reports it.

And whether the next round of orders moves from the payment step to the correction step. Being fined for paying compensation late implies the compensation was owed, which implies corrections were running past 30 days in the first place.

This piece reads published enforcement orders and a public circular. It is not legal advice, and the orders themselves state that they concern regulatory compliance and are not a finding on the validity of any transaction.