Never Share Your UPI PIN
This is the golden rule of UPI safety. Your PIN is a private key required only when you are sending money or checking your balance. No one—not your bank, a customer service agent, or even an NPCI official—will ever ask for it. Scammers often create a sense
of urgency, claiming your account is blocked or a refund is pending, to trick you into revealing your PIN. Remember, receiving money never requires you to enter a PIN. If an app or person asks for your PIN to credit your account, it is a scam. Treat your UPI PIN with the same confidentiality as your ATM PIN.
Verify Receiver Details Before Paying
Before you tap 'Pay', take a moment to double-check the recipient's name on the confirmation screen. Fraudsters often create UPI IDs that closely mimic those of legitimate businesses or individuals to fool you. Whether you've scanned a QR code or entered a mobile number, the app will display the legal name associated with the account. Make sure this name matches the person or merchant you intend to pay. This simple verification step takes only a few seconds but is one of the most effective ways to prevent sending money to the wrong account.
Beware of 'Collect Request' Scams
One of the most common UPI frauds involves the 'Collect Request' or 'Request Money' feature. Scammers send a payment request with a tempting message like "Enter PIN to receive your cashback of ₹5000." Many users, in a hurry, approve the request and enter their PIN, thinking they are receiving money. In reality, they are authorising a payment from their own account. The fundamental rule to remember is that you never need to approve a request or enter a PIN to receive money. If you get an unexpected payment request, decline it immediately.
Treat QR Codes with Caution
QR codes are for making payments, not for receiving them. Fraudsters exploit this by sending QR codes via WhatsApp or email, claiming that scanning them will credit a refund or prize money to your account. However, scanning a QR code and entering your PIN will always debit your account. Be equally cautious in physical stores. Scammers have been known to paste their own QR code sticker over a shop's legitimate one, diverting payments to their own account. Always verify the merchant's name on your screen after scanning and before paying.
Set Transaction Limits and Secure Your Phone
Your phone is now your wallet, so protect it accordingly. Use a strong screen lock—be it a PIN, pattern, or biometric authentication—on your smartphone. Many UPI apps also offer an additional app lock feature for an extra layer of security. Furthermore, consider setting daily transaction limits through your banking app. This won't stop a fraudulent transaction, but it can significantly limit the potential financial loss if your account details are ever compromised. Linking a secondary account with a smaller balance for daily UPI use is another practical strategy to limit your exposure.
Regularly Review Your Transaction History
Make it a habit to periodically review your UPI transaction history, either through your payment app or your bank statement. This helps you quickly spot any unauthorised or suspicious transactions that you don't recognise. Scammers sometimes start with very small transactions to test an account before attempting a larger theft. By regularly monitoring your account, you can detect fraudulent activity early and report it immediately to your bank and the cyber crime helpline (1930). Early detection is crucial for increasing the chances of recovering lost funds.
