UPI has made payments effortless, but the same speed and convenience attract fraudsters. Scammers rely on confusion, urgency, and trust to trick people into either revealing their UPI PIN or unknowingly sending money. The good news is that almost every UPI fraud follows a predictable pattern, and once you recognise the pattern, you can defend yourself easily. This guide walks through the most common UPI scams in India, the warning signs, and the exact steps to take if you ever fall victim.
The Most Common UPI Scams
1. Fake Collect Requests
A scammer sends you a “collect request” through your UPI app that looks like an incoming payment. In reality, approving it and entering your PIN sends money out of your account. Remember the golden rule: you never need a PIN to receive money. If a stranger asks you to approve a request to get money, it is a trap.
2. Fake QR Codes
Fraudsters share a QR code claiming you must scan it to receive a payment, a refund, or a prize. Scanning a QR code and entering your PIN always results in money leaving your account, never entering it. QR codes are for paying, not receiving.
3. Fake KYC and Account Verification
You receive a message or call saying your UPI or bank account will be blocked unless you complete KYC immediately. The scammer sends a link or asks you to share an OTP. Genuine banks never ask for OTPs, PINs, or card details over a call or message.
4. Screen-Sharing App Scams
This is one of the most dangerous tricks. The fraudster, posing as customer support, asks you to install a remote screen-sharing app such as AnyDesk, TeamViewer, or QuickSupport so they can “help” fix an issue. Once installed, they watch your screen, capture your OTPs and PIN, and operate your phone remotely to steal money. Never install such an app at the request of a caller.
5. Refund and Overpayment Scams
A scammer claims they accidentally paid you extra and asks you to “return” the difference, or promises a refund for a failed transaction. They pressure you to approve a request or scan a QR code, which actually debits your account.
Red Flags to Watch For
- Any request to enter your UPI PIN to receive money or a refund
- Calls or messages creating urgency: “act now or your account will be blocked”
- Requests to install a screen-sharing or remote-access app
- Links to unfamiliar websites asking for bank or card details
- Callers claiming to be from your bank but asking for OTPs or PINs
- Offers that seem too good to be true, like cashback for scanning a code
If you are still building your understanding of how UPI is meant to work, our guide on What Is UPI and How to Use It Safely explains the safe-usage basics that make these scams obvious.
What to Do If You Are Defrauded
Acting fast dramatically improves your chances of recovering money. Follow these steps in order:
- Step 1: Immediately call your bank’s customer-care number and report the unauthorised transaction. Ask them to freeze or block the account if needed.
- Step 2: Report the fraud on the National Cyber Crime helpline by dialling 1930. This is the dedicated number for financial cyber fraud in India and the sooner you call, the higher the chance of stopping the money transfer.
- Step 3: File a complaint on the National Cyber Crime Reporting Portal (cybercrime.gov.in) with all transaction details and screenshots.
- Step 4: Raise a dispute within your UPI app and contact NPCI’s grievance mechanism through your app’s complaint section if the issue is unresolved.
- Step 5: Keep written records of every complaint reference number for follow-up.
Reporting within the golden hour, ideally within the first few hours, gives banks a window to reverse or hold the fraudulent transfer.
How to Stay Protected Going Forward
- Never share your UPI PIN, OTP, card number, or CVV with anyone
- Verify the payee name before every payment
- Set a sensible daily transaction limit in your UPI app
- Delete any remote-access app you may have installed at someone’s request
- Keep your phone and apps updated, and use an app lock
The same disciplined mindset applies across all your money tools. For instance, careful borrowing habits matter just as much, which is why our guide on How to Use a Credit Card Wisely is worth a read alongside this one.
Strengthening your financial awareness is the best long-term defence against fraud.
Find cyber safety books on Amazon India ↗
FAQ
Q: Can someone steal money if I only share my UPI ID?
No. Sharing your UPI ID to receive money is safe. Money leaves your account only when you enter your UPI PIN.
Q: What number do I call to report UPI fraud?
Dial 1930, the National Cyber Crime helpline, and also inform your bank immediately. File a detailed complaint at cybercrime.gov.in.
Q: Are screen-sharing apps dangerous?
Yes. Apps like AnyDesk or TeamViewer let a fraudster see your screen and control your phone. Never install one at a caller’s request.
Q: Will I get my money back if I report quickly?
Reporting within the first few hours greatly improves recovery chances, though it is not guaranteed. Speed is critical.
This article is for informational purposes only and is not financial advice. Consult a SEBI-registered advisor or tax professional before making decisions.