Know the Common Scams
The first step in any defence is understanding the threat. Fraudsters are constantly evolving their tactics, but several common scams continue to trap unsuspecting users. One is the fake payment request, where a scammer sends a 'Collect' request, often
disguised as a refund or cashback offer. Unaware users who approve it by entering their PIN end up sending money instead of receiving it. Another prevalent method is the QR code scam. Fraudsters share a QR code via WhatsApp or other platforms, claiming that scanning it will credit money to your account. In reality, scanning a QR code is always for making a payment, and authorising the transaction will debit your account. Phishing scams also remain popular, where fake links sent via SMS or email lead to websites that mimic official UPI or bank pages to steal your PIN and other details.
The Golden Rule: PIN Is Only for Paying
This is the most critical part of your scam-proof routine: you never need to enter your UPI PIN to receive money. Your PIN is a secret key that authorises payments from your account. Scammers often create a sense of urgency, telling you to enter your PIN quickly to receive a prize, a refund, or a payment from a buyer on an online marketplace. They exploit the fact that people are eager to receive money. Always remember, receiving money on UPI requires no PIN, OTP, or any other secret code. If someone asks you for your PIN to send you money, it is a guaranteed scam. Make this a non-negotiable rule in your transaction habits. This single piece of knowledge can protect you from a vast majority of common UPI frauds.
Verify Before You Pay
A moment of caution can save you a lot of trouble. Before you enter your PIN to complete any transaction, your UPI app will display the name of the recipient. Always pause and verify this name. Does it match the person or business you intend to pay? Scammers often use UPI IDs that look similar to legitimate ones, hoping you won't notice the difference. If you are paying a new contact or a merchant for the first time, double-check their UPI ID. If there is any doubt, send a small test amount, like ₹1, and confirm with the recipient that they have received it before proceeding with the full payment. This small step adds a powerful layer of verification to your routine.
Build Strong Digital Hygiene
Securing your UPI account goes beyond just being careful during transactions. It involves maintaining good overall digital security. Start with the basics: secure your smartphone with a strong PIN, pattern, or biometric lock. Only download UPI apps from official sources like the Google Play Store or Apple App Store to avoid fake apps designed to steal your data. Be wary of unsolicited calls or messages from people claiming to be from your bank or a UPI app's customer support. Legitimate companies will never call you to ask for your PIN, OTP, or other sensitive credentials. Avoid using public or unsecured Wi-Fi networks for financial transactions, as hackers can intercept your data on these networks.
What to Do If You Are Scammed
If the worst happens and you fall victim to fraud, speed is critical. The first hour, often called the 'golden hour', is the most crucial for recovery. Your immediate first step should be to call the National Cyber Crime Helpline at 1930. This can help initiate an immediate freeze on the fraudster's account. Next, report the incident on the National Cyber Crime Reporting Portal (cybercrime.gov.in). Concurrently, you must inform your bank and report the fraudulent transaction through your UPI app's dispute resolution feature. According to RBI guidelines, reporting an unauthorised transaction within three days ensures you have zero liability for the loss.
