UPI Fraud Prevention – Stay Safe in 2026
How UPI Frauds Work — Common Types
1. Collect Request Fraud (Most Common)
Scammer sends you a collect / payment request saying "I'm sending you money, just approve." When you enter your PIN, money goes OUT not in.
Rule: You NEVER need to enter your UPI PIN to receive money.
2. Fake Customer Care Numbers
Scammer puts fake bank/UPI helpline numbers on Google. You call, they ask you to install AnyDesk or share a "verification code" — they then access your phone.
3. QR Code Scams
Scammer sends a QR code saying "scan to receive ₹500." Scanning a QR code to receive money makes no sense — QR codes initiate payments, not receipts.
4. OTP Phishing
"Your account will be suspended. Please share the OTP to verify." Banks and UPI apps NEVER ask for OTP over the phone or WhatsApp.
5. Refund Fraud (Rising Trend)
After buying something on OLX or Facebook, the "buyer" sends a payment link saying it's a refund. The link takes you to a fake payment page that deducts money.
15 Rules to Never Break
- Never enter UPI PIN to receive money — it is only for sending
- Never scan a QR code from an unknown person claiming to pay you
- Never install AnyDesk, TeamViewer, or QuickSupport on request
- Never share OTP with anyone — not even "bank officials"
- Never click links in SMS or WhatsApp claiming to be your bank
- Enable UPI transaction limit in your app settings
- Set a daily limit on UPI transactions (most apps allow ₹10,000–25,000/day)
- Enable PIN for every transaction — do not use biometrics alone on shared devices
- Check the recipient VPA (UPI ID) carefully before every payment
- Do not save UPI PIN anywhere on your phone
- Report unknown collect requests immediately — do not decline silently
- Use only official apps — PhonePe, GPay, Paytm, BHIM (downloaded from Play Store / App Store)
- Lock your UPI app with a separate PIN different from phone lock
- Check bank alerts for every transaction — enable instant SMS/email alerts
- Never use public WiFi when doing UPI transactions
If You Are Scammed — Act in the First 30 Minutes
Time is critical. Every minute increases the chance funds are moved beyond recovery.
Minute 0–5: Block the Beneficiary
- Open your UPI app → transaction history → find the fraudulent transaction → "Report" or "Block"
- Or call your bank's 24×7 helpline and ask them to freeze the beneficiary's account
Minute 5–15: Call 1930
The National Cybercrime Financial Fraud Helpline (1930) can coordinate with banks to freeze accounts across different banks. Call immediately and give:
- Your bank name and account
- Transaction amount and time
- Beneficiary UPI ID
Minute 15–30: File Online Complaint
- Go to cybercrime.gov.in
- Select "Report Financial Fraud"
- Fill transaction details
- Get complaint number
Within 24 Hours: File FIR
Visit your local police station with:
- Bank statement showing the fraud transaction
- Screenshot of the payment / QR code / message
- Cybercrime complaint number
UPI App Specific Actions
| App | Fraud Report |
|---|---|
| PhonePe | Help → Report Fraud |
| Google Pay | Help → Contact Support → Payment Dispute |
| Paytm | Help → Report Payment Issue |
| BHIM | Help → Raise Dispute |
NPCI Dispute Resolution
NPCI (National Payments Corporation of India) governs UPI. If your bank is unresponsive:
- Email: npci.upi@npci.org.in
- Raise dispute through your UPI app (bank is obligated to respond within 5 working days)
Helplines
- Cybercrime: 1930
- RBI Consumer: 14448
- NPCI UPI Issues: 1800-120-1740