Simple precautions can prevent many common UPI and digital-payment scams.
UPI has made everyday payments remarkably convenient. A person can pay a shop, transfer money to a relative or settle a bill within seconds using a mobile phone.
That speed also creates opportunities for fraudsters. Most UPI scams do not involve criminals breaking the payment system itself. Instead, they manipulate users into approving a transaction, revealing sensitive information, installing a harmful application or acting without checking the recipient.
The most important rule is simple: you enter a UPI PIN to authorise money leaving your account—not to receive money. The National Payments Corporation of India (NPCI) also advises users to scan a QR code only when making a payment, not when receiving one. See the official NPCI UPI Safety Shield.
How UPI Fraud Usually Works
Fraudsters frequently use social engineering. They create urgency, fear, excitement or trust so that a victim acts before thinking. A scammer may pretend to be a bank employee, customer-care representative, police officer, online buyer, delivery agent, recruiter, relative or representative offering a refund or prize.
The caller may already know your name or phone number. Possessing basic personal information does not prove that the caller is genuine.
1. QR Code Scam
A fraudster may claim that scanning a QR code will allow you to receive a refund, payment, prize or advance. If the next screen asks you to verify an amount and enter a UPI PIN, you may be authorising money to leave your account.
Safety rule
Never scan a QR code merely to receive money. Check the transaction type, recipient name and amount before entering a PIN.
2. Fake Collect Request
A collect request asks you to approve a payment. Fraudsters sometimes describe it as a refund, reward or incoming transfer. Approving it and entering your PIN can debit your account.
Safety rule
Reject unexpected requests. Confirm any genuine-looking request through a separate, trusted communication channel.
3. Fake Customer-Care Numbers
Fraudulent support numbers can appear in advertisements, social-media posts, comments and unofficial websites. A scammer may request card details, an OTP, a UPI PIN or installation of a remote-access application.
Safety rule
Use only the support number published inside the official bank or payment application, on the bank’s official website or on verified account documents.
4. Screen-Sharing and Remote-Access Scam
A caller may ask you to install an application for verification, refund processing, KYC assistance or technical support. These applications can allow another person to view or control your screen.
Safety rule
Do not install screen-sharing, remote-access or SMS-forwarding applications at the request of an unknown caller. End the call and contact your bank through an official channel.
5. UPI PIN and OTP Theft
A UPI PIN, OTP, card PIN and internet-banking password are confidential authentication credentials. A genuine organisation should not need your UPI PIN to credit money to your account.
Safety rule
Never disclose authentication credentials over a call, chat, email, online form or screen-sharing session. Enter a UPI PIN only on the authorised payment page inside a trusted application.
6. Fake Refund and Cashback Offers
Messages promising refunds, rewards or cashback may contain phishing links. These pages can imitate a bank or payment service and ask for financial information.
Safety rule
Open the official application independently instead of using a link received in a message. Genuine rewards should be visible through the service’s official interface.
7. Online Marketplace Scam
A supposed buyer may agree to purchase an item and then send a QR code or collect request. The buyer may claim that a small test transaction is required before sending the full payment.
Safety rule
Confirm an actual credit in your bank account. Do not rely on a screenshot or message supplied by the buyer.
8. Fake Job and Work-from-Home Scam
Scammers advertise easy jobs, rating tasks or part-time work. They may send a small initial amount to build trust before demanding a larger deposit to unlock assignments or supposed earnings.
Safety rule
Treat registration fees, security deposits and payments required to withdraw earnings as warning signs. Verify the employer through an independently located official website.
9. Wrong Transfer and Refund Scam
A stranger may claim to have transferred money accidentally and demand an immediate refund. The supplied screenshot could be false, edited or related to another transaction.
Safety rule
Check your bank statement directly. If a genuine unexplained credit exists, contact your bank instead of acting under pressure.
10. SIM, KYC or Account-Blocking Threat
A message may warn that your bank account, mobile number or UPI service will be blocked unless you complete an urgent verification process.
Safety rule
Do not click the supplied link. Contact the relevant organisation using its official application, website or verified helpline.
11. Impersonation Using a Familiar Name
Fraudsters may copy a friend’s photograph, create a similar account or claim to be using a temporary phone number.
Safety rule
Before transferring money, call the person using a previously saved number or confirm through another trusted method. A familiar photograph is not identity verification.
12. Digital-Arrest and Authority Impersonation
A caller may falsely claim that a parcel, bank account or identity document is linked to a crime. The victim may be threatened with arrest and ordered to move money for investigation or verification.
Safety rule
Do not transfer money under pressure. Disconnect the call and independently contact the relevant authority. Do not move funds to a so-called safe account.
A Five-Second Check Before Every UPI Payment
| Check | Question to ask |
|---|---|
| Transaction | Am I paying or receiving money? |
| Recipient | Does the displayed name match the intended person or merchant? |
| Amount | Is the amount correct? |
| Reason | Did I initiate this transaction myself? |
| Pressure | Is someone rushing or threatening me? |
If any answer is unclear, cancel the transaction.
What to Do Immediately After a Suspected UPI Fraud
1. Contact your bank
Call the bank using the number in its official application, official website, passbook or card documentation. Ask it to register the disputed transaction and secure the account.
2. Call the national cybercrime helpline
The Indian Cyber Crime Coordination Centre states that financial cyber fraud can be reported through 1930, which operates across India’s States and Union Territories. See the official I4C reporting information.
3. File an online complaint
Submit the incident through the official National Cyber Crime Reporting Portal. Use the genuine government website and beware of anyone promising guaranteed recovery for a fee.
4. Preserve evidence
- Transaction ID and bank reference number
- Screenshots of messages and payment requests
- Phone numbers and profile details
- Website addresses, emails and call records
- Dates, times, amounts and relevant account statements
Do not edit the original evidence.
5. Secure affected accounts
Change compromised passwords using a clean, trusted device. Contact the bank if a UPI PIN, card detail or banking credential may have been exposed. Remove suspicious applications and review application permissions.
Reporting does not guarantee recovery, but prompt reporting gives banks and authorities a better opportunity to investigate and attempt appropriate action.
Should You Stop Using UPI?
UPI includes authentication and transaction controls. The larger risk in many scams is a user being deceived into authorising an action.
The Reserve Bank of India continues to examine safeguards intended to reduce fraud in digital payments. Its April 9, 2026 discussion paper explored possible additional protections; proposals in a discussion paper should not be treated as final rules. Read the RBI discussion paper.
- Keep your phone and UPI application updated.
- Use a secure screen lock.
- Review bank alerts and statements.
- Set sensible transaction limits where available.
- Avoid financial transactions over unsecured public Wi-Fi.
- Verify every recipient and amount.
- Never act under pressure from an unknown caller.
Frequently Asked Questions
Do I need a UPI PIN to receive money?
No. NPCI’s safety guidance states that a PIN is entered to deduct money from your account. Be suspicious if someone asks you to enter it to receive a refund or payment.
Can scanning a QR code credit money to my account?
You should not scan a QR code to receive money. QR scanning is generally associated with initiating a payment.
Can a bank employee ask for my UPI PIN?
Do not disclose your UPI PIN, OTP or banking password to anyone. Contact your bank through a verified support channel if a caller requests confidential credentials.
What is the official number for reporting financial cyber fraud in India?
The national financial cyber-fraud helpline is 1930. Complaints can also be filed at cybercrime.gov.in.
Is money recovery guaranteed after reporting?
No. Recovery depends on the circumstances and how quickly the transaction can be traced or stopped. Report immediately without paying anyone who promises guaranteed recovery.
Conclusion
UPI fraud prevention depends less on memorising every new scam and more on recognising repeated patterns. Do not enter a PIN to receive money. Do not scan a QR code for an incoming payment. Never share authentication credentials. Avoid unknown links and remote-access applications.
A five-second verification can prevent a financial loss that may take months to investigate.
Disclaimer: This article provides general consumer-awareness information and is not legal, banking or personalised financial advice. Contact your bank and the appropriate authorities for guidance about a specific incident.
UPI has made everyday payments remarkably convenient. A person can pay a shop, transfer money to a relative or settle a bill within seconds using a mobile phone.
That speed also creates opportunities for fraudsters. Most UPI scams do not involve criminals breaking the payment system itself. Instead, they manipulate users into approving a transaction, revealing sensitive information, installing a harmful application or acting without checking the recipient.
The most important rule is simple: you enter a UPI PIN to authorise money leaving your account—not to receive money. The National Payments Corporation of India (NPCI) also advises users to scan a QR code only when making a payment, not when receiving one. See the official NPCI UPI Safety Shield.
How UPI Fraud Usually Works
Fraudsters frequently use social engineering. They create urgency, fear, excitement or trust so that a victim acts before thinking. A scammer may pretend to be a bank employee, customer-care representative, police officer, online buyer, delivery agent, recruiter, relative or representative offering a refund or prize.
The caller may already know your name or phone number. Possessing basic personal information does not prove that the caller is genuine.
1. QR Code Scam
A fraudster may claim that scanning a QR code will allow you to receive a refund, payment, prize or advance. If the next screen asks you to verify an amount and enter a UPI PIN, you may be authorising money to leave your account.
Safety rule
Never scan a QR code merely to receive money. Check the transaction type, recipient name and amount before entering a PIN.
2. Fake Collect Request
A collect request asks you to approve a payment. Fraudsters sometimes describe it as a refund, reward or incoming transfer. Approving it and entering your PIN can debit your account.
Safety rule
Reject unexpected requests. Confirm any genuine-looking request through a separate, trusted communication channel.
3. Fake Customer-Care Numbers
Fraudulent support numbers can appear in advertisements, social-media posts, comments and unofficial websites. A scammer may request card details, an OTP, a UPI PIN or installation of a remote-access application.
Safety rule
Use only the support number published inside the official bank or payment application, on the bank’s official website or on verified account documents.
4. Screen-Sharing and Remote-Access Scam
A caller may ask you to install an application for verification, refund processing, KYC assistance or technical support. These applications can allow another person to view or control your screen.
Safety rule
Do not install screen-sharing, remote-access or SMS-forwarding applications at the request of an unknown caller. End the call and contact your bank through an official channel.
5. UPI PIN and OTP Theft
A UPI PIN, OTP, card PIN and internet-banking password are confidential authentication credentials. A genuine organisation should not need your UPI PIN to credit money to your account.
Safety rule
Never disclose authentication credentials over a call, chat, email, online form or screen-sharing session. Enter a UPI PIN only on the authorised payment page inside a trusted application.
6. Fake Refund and Cashback Offers
Messages promising refunds, rewards or cashback may contain phishing links. These pages can imitate a bank or payment service and ask for financial information.
Safety rule
Open the official application independently instead of using a link received in a message. Genuine rewards should be visible through the service’s official interface.
7. Online Marketplace Scam
A supposed buyer may agree to purchase an item and then send a QR code or collect request. The buyer may claim that a small test transaction is required before sending the full payment.
Safety rule
Confirm an actual credit in your bank account. Do not rely on a screenshot or message supplied by the buyer.
8. Fake Job and Work-from-Home Scam
Scammers advertise easy jobs, rating tasks or part-time work. They may send a small initial amount to build trust before demanding a larger deposit to unlock assignments or supposed earnings.
Safety rule
Treat registration fees, security deposits and payments required to withdraw earnings as warning signs. Verify the employer through an independently located official website.
9. Wrong Transfer and Refund Scam
A stranger may claim to have transferred money accidentally and demand an immediate refund. The supplied screenshot could be false, edited or related to another transaction.
Safety rule
Check your bank statement directly. If a genuine unexplained credit exists, contact your bank instead of acting under pressure.
10. SIM, KYC or Account-Blocking Threat
A message may warn that your bank account, mobile number or UPI service will be blocked unless you complete an urgent verification process.
Safety rule
Do not click the supplied link. Contact the relevant organisation using its official application, website or verified helpline.
11. Impersonation Using a Familiar Name
Fraudsters may copy a friend’s photograph, create a similar account or claim to be using a temporary phone number.
Safety rule
Before transferring money, call the person using a previously saved number or confirm through another trusted method. A familiar photograph is not identity verification.
12. Digital-Arrest and Authority Impersonation
A caller may falsely claim that a parcel, bank account or identity document is linked to a crime. The victim may be threatened with arrest and ordered to move money for investigation or verification.
Safety rule
Do not transfer money under pressure. Disconnect the call and independently contact the relevant authority. Do not move funds to a so-called safe account.
A Five-Second Check Before Every UPI Payment
| Check | Question to ask |
|---|---|
| Transaction | Am I paying or receiving money? |
| Recipient | Does the displayed name match the intended person or merchant? |
| Amount | Is the amount correct? |
| Reason | Did I initiate this transaction myself? |
| Pressure | Is someone rushing or threatening me? |
If any answer is unclear, cancel the transaction.
What to Do Immediately After a Suspected UPI Fraud
1. Contact your bank
Call the bank using the number in its official application, official website, passbook or card documentation. Ask it to register the disputed transaction and secure the account.
2. Call the national cybercrime helpline
The Indian Cyber Crime Coordination Centre states that financial cyber fraud can be reported through 1930, which operates across India’s States and Union Territories. See the official I4C reporting information.
3. File an online complaint
Submit the incident through the official National Cyber Crime Reporting Portal. Use the genuine government website and beware of anyone promising guaranteed recovery for a fee.
4. Preserve evidence
- Transaction ID and bank reference number
- Screenshots of messages and payment requests
- Phone numbers and profile details
- Website addresses, emails and call records
- Dates, times, amounts and relevant account statements
Do not edit the original evidence.
5. Secure affected accounts
Change compromised passwords using a clean, trusted device. Contact the bank if a UPI PIN, card detail or banking credential may have been exposed. Remove suspicious applications and review application permissions.
Reporting does not guarantee recovery, but prompt reporting gives banks and authorities a better opportunity to investigate and attempt appropriate action.
Should You Stop Using UPI?
UPI includes authentication and transaction controls. The larger risk in many scams is a user being deceived into authorising an action.
The Reserve Bank of India continues to examine safeguards intended to reduce fraud in digital payments. Its April 9, 2026 discussion paper explored possible additional protections; proposals in a discussion paper should not be treated as final rules. Read the RBI discussion paper.
- Keep your phone and UPI application updated.
- Use a secure screen lock.
- Review bank alerts and statements.
- Set sensible transaction limits where available.
- Avoid financial transactions over unsecured public Wi-Fi.
- Verify every recipient and amount.
- Never act under pressure from an unknown caller.
Frequently Asked Questions
Do I need a UPI PIN to receive money?
No. NPCI’s safety guidance states that a PIN is entered to deduct money from your account. Be suspicious if someone asks you to enter it to receive a refund or payment.
Can scanning a QR code credit money to my account?
You should not scan a QR code to receive money. QR scanning is generally associated with initiating a payment.
Can a bank employee ask for my UPI PIN?
Do not disclose your UPI PIN, OTP or banking password to anyone. Contact your bank through a verified support channel if a caller requests confidential credentials.
What is the official number for reporting financial cyber fraud in India?
The national financial cyber-fraud helpline is 1930. Complaints can also be filed at cybercrime.gov.in.
Is money recovery guaranteed after reporting?
No. Recovery depends on the circumstances and how quickly the transaction can be traced or stopped. Report immediately without paying anyone who promises guaranteed recovery.
Conclusion
UPI fraud prevention depends less on memorising every new scam and more on recognising repeated patterns. Do not enter a PIN to receive money. Do not scan a QR code for an incoming payment. Never share authentication credentials. Avoid unknown links and remote-access applications.
A five-second verification can prevent a financial loss that may take months to investigate.
Disclaimer: This article provides general consumer-awareness information and is not legal, banking or personalised financial advice. Contact your bank and the appropriate authorities for guidance about a specific incident.
