The Rise of UPI and Inevitable Risks
UPI has fundamentally changed how India transacts, processing billions of transactions monthly. Its simplicity is its strength, but it's also a magnet for fraudsters. Scammers don't need to hack complex banking systems; they exploit human trust and manipulate
users into authorising payments themselves. These scams rely on social engineering—creating a sense of urgency, fear, or excitement to trick you into making a mistake. The good news is that the UPI platform itself is secure, built with multi-factor authentication. The weakness fraudsters target is the user, which is why awareness is your best defence.
Decoding the 'Fake Screenshot' Ploy
One of the most common scams, especially for merchants and online sellers, involves fake payment confirmations. A scammer will pretend to complete a transaction and show a doctored screenshot of a 'payment successful' screen from a popular UPI app. These images can look incredibly convincing, complete with fake transaction IDs. The victim, believing the payment is done, hands over goods or services, only to find later that no money was ever credited. Some fraudsters even use counterfeit UPI apps that mimic the entire payment process, displaying fake success animations and receipts on their screen. The core of the deception is convincing you to trust their screen instead of your own account records.
The 'Request Money' Reversal Trap
Another deceptive tactic abuses UPI's 'Request Money' or 'Collect Request' feature. A fraudster, often posing as a buyer or someone wanting to send you money, will send you a payment request instead. They might claim you need to approve this request to receive your funds. An unsuspecting user, seeing the notification, might enter their UPI PIN to authorise it, believing they are accepting money. However, entering your PIN always authorises a debit from your account. This simple misunderstanding is what scammers rely on. The golden rule is simple: you never, ever need to enter your PIN to receive money.
Scanning for Danger: QR Code Scams
QR codes have become ubiquitous, but they are also a tool for fraud. Scammers exploit the myth that you need to scan a QR code to receive money. They might send you a QR code via WhatsApp or another messenger, claiming it's for payment. When you scan it, your UPI app opens a screen to send money, not receive it. If you enter your PIN, the funds are debited from your account. In another variation, fraudsters physically paste their own QR code sticker over a genuine merchant's code at a shop, redirecting all payments to their own account. Always verify the recipient's name displayed on your screen after scanning a QR code before proceeding with any payment.
Your Ultimate Defence Checklist
Protecting yourself from UPI scams comes down to a few non-negotiable habits. First and foremost, always verify a payment by checking your bank account balance or transaction history through your official banking or UPI app. Do not rely on screenshots or confirmation messages provided by the sender. Second, remember that your UPI PIN is only for sending money or checking your balance—never for receiving funds. Be extremely cautious of any transaction that creates a sense of urgency; genuine payments rarely require you to act in a panic. Decline and block unknown or suspicious payment requests immediately. Finally, never share your PIN or OTP with anyone, not even someone claiming to be from your bank or a customer care service. Bank representatives will never ask for this information.
