The Golden Rule: Your PIN Is for Paying Only
This is the single most important rule to remember: you never need to enter your UPI PIN to receive money. Payments you receive are credited to your account automatically. Your UPI PIN is a security feature for authorising payments *from* your account.
If anyone, whether a supposed buyer, a customer care agent, or someone claiming to process a refund, asks you to enter your PIN to *receive* funds, it is unequivocally a scam. They are tricking you into authorising a payment to them.
Beware the 'Collect Request' Scam
One of the most common UPI frauds involves the 'collect request' feature. Scammers send a payment request that can look confusingly similar to a payment notification. They might be posing as a buyer for an item you've listed online or promising you cashback. They will send a request and pressure you to "approve" it to get your money. In reality, approving the request and entering your PIN will debit money from your account. Always read the notification on your UPI app carefully: does it say you are 'Paying' or 'Receiving'? If it's a request to pay when you're expecting to receive, decline it immediately.
Verify, Don't Trust Screenshots
Another prevalent tactic, especially targeting merchants and sellers, is the use of fake payment screenshots. A fraudster will show you a doctored image that looks like a genuine 'Payment Successful' screen from an app like PhonePe, Google Pay, or Paytm. These fakes can be very convincing, complete with transaction IDs and timestamps. Never release goods or services based on a screenshot alone. The only real proof of payment is a confirmation message (SMS) from your bank or seeing the transaction appear in your own UPI app's history or bank statement. If there's no notification on your end, the payment was not made.
Scrutinise QR Codes and Links
Be extremely cautious with QR codes or payment links sent to you via SMS or WhatsApp, especially from unknown contacts. Scammers will send a QR code claiming that scanning it will allow you to receive a refund or payment. However, just like with collect requests, scanning a fraudulent QR code will often take you to a payment page where entering your PIN sends money *to* the scammer. Remember, QR codes are generally used for making payments, not receiving them. Similarly, phishing links in messages can lead to fake websites that mimic UPI apps to steal your PIN or other financial details.
Watch Out for High-Pressure Tactics
Fraudsters thrive on creating a sense of urgency or fear to make you act without thinking. They might call you pretending to be from your bank, claiming your account will be blocked or your KYC has expired. They create panic to rush you into approving a request or sharing an OTP. Legitimate organisations will not demand immediate action over a phone call or threaten you. Any message that creates a sense of panic should be treated as suspicious. Take a moment to pause, think, and verify the claim through official channels, like the customer care number on your bank's official website.
Check the Sender's Details
Before approving any transaction, take a second to check the details of the person or merchant requesting the payment. Look for inconsistencies. Does the name on the UPI request match the person you think you are paying? Scammers often use fake UPI IDs with slight misspellings or unusual handles. Many UPI apps now show the registered name of the person before you complete a transaction; if the name is different from what you expect, it is a major red flag. Always verify the payee's name and UPI ID.
