The Golden Rule of UPI Safety
There is one fundamental principle that defeats the vast majority of UPI scams: you never, ever need to enter your UPI PIN to receive money. Your PIN is a key that authorises money to leave your account. It is for making payments, not for receiving them.
Any person, message, or QR code that asks you to enter your PIN to accept a payment, refund, or prize is a scam. Scammers thrive on creating confusion around this simple fact, often disguising an outgoing payment as an incoming one. Remembering this single rule is your strongest defence.
Beware the Fake 'Collect Request'
One of the most common scams involves the 'Collect Request' feature. Fraudsters, often posing as buyers for items you've listed online, will send you a payment request instead of actually sending money. To a distracted user, the notification can look like a credit confirmation. They will pressure you to act fast and 'approve' the transaction to receive the funds. However, approving a collect request and entering your PIN does the opposite: it sends money from your account to the scammer. Always read the details on your UPI app screen carefully. If it says 'Pay' or asks for your PIN, you are authorising a debit, not a credit.
The Deceptive QR Code Scam
Scammers are increasingly using QR codes to trick people. A fraudster might send you a QR code via WhatsApp or email, claiming that scanning it will credit money to your account for a refund or cashback offer. In reality, scanning a QR code can only ever initiate a payment from your account. When you scan the fraudulent code, your UPI app will open a payment screen. If you proceed and enter your PIN, you are sending money to the scammer. Another physical variation is the 'sticker swap', where fraudsters paste their own QR code sticker over a genuine merchant's code at a shop or petrol pump, diverting customer payments to their own account.
Other Common Scams to Watch For
Beyond fake requests, be vigilant about other tactics. Scammers create fake customer care numbers and post them on social media or in search results. When you call for help with an issue, they will ask for your PIN or OTP, or trick you into installing a screen-sharing app to gain control of your phone. Phishing links sent via SMS or email, claiming your KYC is pending or your account will be blocked, are another common trap. These links lead to fake websites that steal your banking credentials. Never trust unsolicited links or customer care numbers found online; always use the official numbers listed inside your banking app or on the official website.
Your UPI Verification Checklist
Before approving any UPI transaction, pause and run through this mental checklist to stay safe. First, always verify the recipient's name displayed in your app before you hit 'Pay'. Does it match the person or merchant you intend to pay? Second, double-check the amount. Third, never rely on screenshots as proof of payment; they can be easily edited. The only real confirmation is a credit message from your bank or seeing the transaction in your own app's history. If a request is unexpected or from an unknown UPI ID, decline it immediately. And finally, if anyone creates a sense of extreme urgency or fear, it's a major red flag—slow down and verify everything.
