Never Share Your UPI PIN
This is the golden rule of UPI safety. Your UPI PIN is a confidential 4 or 6-digit number that authorises all payment transactions from your account. It is meant for your eyes only. Never share it with anyone, including individuals posing as bank employees,
customer service agents, or even family members. Banks and official UPI apps will never call, email, or message you asking for your PIN or One-Time Password (OTP). Remember, you only need to enter your PIN when you are sending money, never when you are receiving it. Any request for your PIN to receive funds is a guaranteed scam.
Verify Before You Scan a QR Code
QR codes offer immense convenience, but they are a common tool for fraudsters. Scammers create fake QR codes and send them via messages or even paste them over legitimate ones at shops. They trick you by claiming you need to scan the code to receive a payment, refund, or prize. However, scanning a QR code is exclusively for making payments, not receiving them. Before you approve any payment after scanning a code, always verify the recipient's name and details displayed on your app's screen. If the name is unfamiliar or the situation feels suspicious, cancel the transaction immediately.
Beware of Fake 'Payment Request' Scams
A popular tactic involves scammers sending a 'collect request' or 'payment request' through a UPI app. They might call you pretending to be a buyer for an item you've listed online or someone who has mistakenly sent you money, then send a request claiming you need to approve it to receive the funds. In reality, approving the request and entering your PIN does the opposite: it sends money from your account to theirs. Always read the notification on your UPI app carefully. If it says 'Pay' or asks for your PIN for an incoming transaction, it's a fraud attempt. Decline all unexpected payment requests.
Avoid Unverified Links and Apps
Phishing remains a significant threat. Fraudsters send deceptive emails, SMS messages, or WhatsApp links that lead to fake websites designed to look like your bank or UPI app. These sites are built to steal your UPI PIN, password, or other sensitive details. A common scam involves messages about pending KYC updates or account blockages, creating a sense of urgency to make you click without thinking. Never click on links from unknown sources. Additionally, only download UPI apps from official sources like the Google Play Store or Apple App Store, as fake apps exist to harvest your data.
Secure Your Phone and Apps
Your smartphone itself is the first line of defence. Always use a strong screen lock, whether it's a PIN, pattern, or biometric lock like a fingerprint or face ID. This prevents unauthorized access to your device if it is lost or stolen. Many UPI apps also offer an additional layer of security through an app-specific lock. Also, be wary of anyone asking you to install remote access or screen-sharing apps (like AnyDesk or TeamViewer) under the pretext of providing customer support. Scammers use these to watch you enter your PIN or take control of your device to make fraudulent transactions.
Regularly Review Your Transaction History
Make it a habit to regularly check your UPI transaction history and bank statements. This proactive step helps you quickly spot any unauthorized activity you might have otherwise missed. The sooner you report a fraudulent transaction to your bank and the National Cyber Crime Helpline (1930), the higher the chances of potentially recovering the money. Setting transaction alerts via SMS and email also ensures you are notified immediately whenever a debit occurs, allowing for a swift response.
