The Golden Rule of UPI Security
Before we dive into the details, let's establish the most important rule of UPI safety: you NEVER need to enter your UPI PIN to receive money. Your PIN is a key that only works one way—to authorise money leaving your account. Anyone who tells you otherwise,
whether they claim to be a buyer, a customer service agent, or a friend, is almost certainly trying to scam you. Remembering this single fact is your strongest defense against a wide range of UPI frauds.
What Is a Collect Request Scam?
A legitimate collect request is a feature that allows merchants or individuals to request a payment from you. For instance, a subscription service might send you a monthly collect request. The scam starts when fraudsters send you a payment request disguised as a refund, a prize, or a payment for an item you're selling. The entire deception hinges on making you believe you are approving money coming into your account, when in reality, you are authorising a debit. The note attached to the request might say “Cashback Approved” or “Refund for your order,” but the action button will say “Pay.” Scammers rely on you reading the deceptive note and ignoring the button.
Red Flag 1: The Request Is Unexpected
Fraudsters often create a pretext for you to expect money. This could be a fake notification about winning a prize, a supposed refund for a cancelled order, or a message from a “buyer” for something you listed on an online marketplace. They might even invent a story about having sent you money by mistake and ask you to approve a request to “return” it, even though no money ever arrived. If you receive a payment request you were not explicitly expecting from a known party, treat it with extreme suspicion. Legitimate credits to your account do not require any approval or PIN entry from your side.
Red Flag 2: Urgent or Threatening Language
Scammers create a false sense of urgency to rush you into making a mistake. They might say the “offer will expire in minutes” or that your “account will be blocked” if you don't act immediately. This pressure is designed to prevent you from thinking clearly and verifying the request. They might call you and try to talk you through the process, insisting you just need to enter your PIN to complete the credit. Any time someone is pressing you to approve a UPI transaction quickly, it is a major warning sign. Pause, take a moment, and carefully read everything on the screen.
Red Flag 3: The Button Says 'Pay'
Your UPI app is designed to be clear about the action you are taking. No matter what the descriptive note says, the button's text tells the truth. If you are about to authorise a debit from your account, the button will clearly say “Pay,” “Send,” or “Approve Payment.” It will never say “Receive Money.” Always read the button, not just the story in the note. If the note says “You have won ₹5,000” but the button says “Pay ₹5,000,” it is a scam. Decline the request immediately.
What to Do If You've Been Scammed
If you realise you have mistakenly approved a fraudulent request, speed is critical. First, immediately call the national cybercrime helpline at 1930. This is the fastest way to potentially get the fraudulent transaction put on hold. Next, contact your bank using the official number on your debit card or passbook and report the unauthorized transaction; have the UPI transaction ID (UTR number) ready. Finally, file a formal complaint on the National Cyber Crime Reporting Portal at cybercrime.gov.in. You should also report the fraudulent user and transaction within your UPI app itself.
