UPI Scam Prevention: A Safety Checklist for Everyday Payments

UPI makes payments convenient, but convenience can also make rushed decisions costly. Most payment fraud depends on social engineering: a person creates urgency and persuades you to approve an action without checking the details.

Remember the basic UPI rule

Your UPI PIN is used to authorise money leaving your account. You do not need to enter a PIN to receive a normal payment. Never share your PIN, OTP, card details or screen-sharing access with anyone.

Check collect requests carefully

Before approving a request, read the name, amount and reason displayed in your UPI app. Decline unexpected requests. A caller claiming to send a refund may actually be asking you to approve a debit.

Be careful with QR codes

Scanning a QR code and entering your PIN usually authorises a payment. Scan only codes from a trusted recipient and confirm the amount before approval. Do not scan a code merely to receive money.

Protect your device

Use a screen lock, update the operating system and install apps only from official stores. Avoid remote-access apps suggested by unknown callers. Review app permissions and remove apps you no longer use.

Act quickly after suspected fraud

Contact your bank through its official website or app and report the transaction immediately. In India, use the official cybercrime reporting channels and preserve transaction IDs, messages and call details. Do not pay another fee to someone promising recovery.

Final takeaway

Pause before approving, verify the recipient and keep authentication details private. Quick reporting improves the chance of receiving guidance while the transaction is investigated.

The Most Important UPI Rule

You do not need to enter a UPI PIN to receive money. A PIN authorises money to leave your account. If a caller says you must scan a QR code, approve a collect request or enter a PIN to receive a refund, cashback or prize, stop the conversation and verify through the organisation’s official app or website.

Check the Screen Before Entering Your PIN

Read the receiver name, amount and transaction purpose on the payment screen. A familiar profile photo or chat name is not enough because messaging accounts can be impersonated or compromised. For a new receiver, send a small test amount and independently confirm receipt before transferring a large sum.

Common UPI Scam Patterns

• Fake customer-care numbers found through search results or social media
• QR codes presented as a way to receive money
• Collect requests disguised as refunds or account verification
• Screen-sharing or remote-access apps installed on a stranger’s instructions
• Urgent messages from a “friend” using a new number
• Fake investment, task or part-time job schemes demanding repeated payments

A 20-Second Payment Checklist

Pause, read the payee name, check the amount, confirm whether you are paying or receiving, and reject unexpected collect requests. Never share an OTP, UPI PIN or card PIN. Keep your banking and UPI apps updated from the official app store and use a secure screen lock.

Example: The Fake Refund Call

A caller claims your ₹1,999 refund is ready and sends a collect request for ₹1,999. The word “refund” in the message does not change the direction of the transaction. Approving the request and entering your PIN pays the caller. End the call and check the original merchant order directly.

If You Sent Money to a Suspected Scammer

1. Contact your bank or payment app immediately through verified support channels.
2. For financial cyber fraud in India, call 1930 promptly and report the incident at the National Cyber Crime Reporting Portal.
3. Save transaction IDs, screenshots, phone numbers and messages.
4. Change compromised credentials and remove unknown remote-access apps.
5. Continue following your bank’s complaint and dispute process.

Fast reporting can help, but recovery is not guaranteed. Do not pay anyone who promises guaranteed recovery for another fee.

Official Guidance

The NPCI fraud-awareness guidance warns about fake cashback links, QR-code misuse, unknown apps and fraudulent schemes. CERT-In also advises users not to share OTPs or PINs and not to transfer money under pressure. Use official contact details rather than numbers supplied by an unknown caller.

Frequently Asked Questions

Can someone take money using only my UPI ID? A UPI ID can be used to send a payment request, but you should never approve an unexpected request or disclose authentication details. Should I scan a QR code to receive money? No—scanning and authorising a QR generally initiates a payment from you.

Safer Habits for Shops and Public Places

Verify that a printed QR code has not been covered or replaced. Confirm the merchant name on screen and keep your PIN private while entering it. Do not hand an unlocked phone to a stranger for “help.” If a transaction shows pending, check your app and bank history instead of paying repeatedly under pressure.

Frequently Asked Questions

What if a payment is pending? Follow the bank or app’s official status and support process; never approve a second request from an unknown person. Can customer care ask for screen sharing? Treat unsolicited requests as dangerous and contact verified support yourself. Is a screenshot proof of payment? No. Confirm the credit in your own account or merchant system.