1. Guard Your UPI PIN Like a Bank Vault Key
This is the golden rule of UPI: your PIN is only required when you are sending money, never when you are receiving it. If someone asks for your PIN to send you money, it is a guaranteed scam. Treat your 4 or 6-digit UPI PIN with the utmost secrecy. Never
share it with anyone over the phone, in a message, or even in person. Scammers often use tactics like phishing, where they send fake links that lead to pages mimicking your UPI app, designed solely to steal your PIN. Another common trick involves fraudsters calling you, pretending to be from your bank or a company, and asking you to enter your PIN to receive a refund or prize. Remember, entering your PIN on the final screen of a UPI app always authorises a debit from your account.
2. Always Verify the Recipient's Name
Before you enter your PIN to complete a transaction, every UPI app displays the legal name of the person or merchant you are about to pay. Make this your non-negotiable checkpoint. Scammers often create UPI IDs that look similar to legitimate ones or use fake display names to trick you. A moment of verification can prevent sending money to the wrong account. As of mid-2026, the National Payments Corporation of India (NPCI) has made it mandatory for all apps to display only the recipient's official bank-registered name, removing potentially misleading nicknames or contact list names from the payment screen. This provides an extra layer of security, but the habit of checking is still your best defense.
3. Be Suspicious of All QR Codes
QR codes are for making payments, not for receiving them. Fraudsters exploit this by sending you a QR code on WhatsApp or email, claiming that scanning it will credit money to your account for a refund, a sale on a marketplace, or a lottery win. In reality, scanning a QR code and entering your PIN does the opposite: it sends money from your account to theirs. Be equally cautious in public places. Scammers sometimes paste their own fraudulent QR code sticker over a genuine one at a shop, petrol pump, or parking meter. Before paying, always confirm that the merchant name displayed on your app screen after scanning matches the shop you are actually at.
4. Treat 'Collect Requests' with Caution
A 'collect request' is a feature that allows someone to request money from you through UPI. Scammers abuse this by sending unsolicited requests, often with messages like "Enter your PIN to receive payment" or "Approve this request for your refund." They rely on you being distracted and approving the request without reading it carefully. If you approve it and enter your PIN, you are not receiving money; you are sending it. Make it a habit to decline any and all payment requests from unknown UPI IDs. If a legitimate person or business needs to receive money from you, they can simply share their UPI ID or QR code for you to initiate the payment yourself.
5. Secure Your Phone Like a Digital Wallet
Your smartphone is no longer just a communication device; it's your wallet. Protecting it is crucial for financial safety. Start by setting a strong screen lock, preferably using biometric authentication like a fingerprint or face ID. This prevents anyone who gets physical access to your phone from opening your payment apps. Furthermore, be extremely wary of unsolicited apps. Fraudsters may trick you into installing screen-sharing applications under the guise of providing 'customer support'. Once installed, these apps allow them to see everything on your screen in real-time, including when you enter your UPI PIN or bank passwords. Never grant screen-sharing access to a stranger.
6. Regularly Review Your Transaction History
Don't let your digital transaction history be a case of 'out of sight, out of mind'. Make it a weekly habit to scroll through your recent UPI payments in your banking or payment app. This simple check helps you quickly spot any unauthorised transactions you don't recognise. Quick detection is critical. According to RBI guidelines, your liability in a fraudulent transaction can be limited or even zero if you report it to your bank promptly, typically within three business days. The sooner you spot an issue and report it through the official channels—your UPI app, your bank's fraud helpline, and the National Cyber Crime Reporting Portal—the better your chances of recovering your funds.
