Rule 1: Be Suspicious of Urgent Requests
One of the most common tactics used by fraudsters is phishing. This involves sending messages that look like they are from a legitimate source, such as your bank, a courier company, or even a government agency. These messages, sent via email (phishing),
SMS (smishing), or phone calls (vishing), are designed to create panic. They often use urgent language, warning that your account will be blocked or you will face a penalty if you do not act immediately. A real bank will never ask you to share your PIN, password, or One-Time Password (OTP) over a call or message. Be wary of generic greetings like "Dear Customer" instead of your name, and look out for spelling or grammar mistakes. Always pause and think before clicking any link that arrives unexpectedly. If a message claims to be from your bank, close it and open your official banking app or website directly to check for any genuine alerts.
Rule 2: Understand How Payments Actually Work
Scammers exploit a simple lack of knowledge about how payment systems function. Remember this golden rule: you never need to enter your UPI PIN or scan a QR code to receive money. Fraudsters often misuse the 'Request Money' feature on UPI apps, sending a payment request and hoping you will approve it by entering your PIN, thinking you are receiving cash. Another common trick involves sending you a QR code on WhatsApp or another messenger, claiming you will get a refund or prize money after scanning it. Scanning a QR code is always for making a payment, not for receiving one. If someone asks you to enter your PIN to get money, it is a scam. Decline the request and block the user immediately. This single piece of knowledge can prevent a majority of UPI-related frauds.
Rule 3: Check Before You Scan a QR Code
QR codes are everywhere, from restaurant menus to parking meters, but they can be easily manipulated. This scam, sometimes called 'quishing', involves fraudsters placing their own malicious QR code over a legitimate one. Before you scan any physical QR code, take a moment to inspect it. Does it look like a sticker has been pasted on top of another code? If it seems tampered with, do not scan it. When you do scan a code, your phone should show a preview of the website URL it leads to. Examine this link carefully before tapping to open it. Look for misspellings or a domain that doesn't match the business. A link that looks suspicious or uses a URL shortener is a major red flag. When in doubt, it is always safer to manually type the official website address into your browser.
Rule 4: Build a Strong Digital Fort
Your first line of defence is good digital hygiene. Always download payment and banking apps from official sources like the Google Play Store or Apple App Store, never from a link sent to you. Keep your phone's operating system and all your apps updated, as updates often contain critical security patches that protect you from new threats. Avoid using public or unsecured Wi-Fi networks for financial transactions, as hackers can intercept your data on these connections. Use your mobile data or a trusted home network instead. Finally, enable transaction alerts on your banking and UPI apps. These notifications will help you spot any unauthorized activity on your account immediately.
Rule 5: Know What to Do If You Are Scammed
If you realise you have been a victim of financial fraud, you must act fast. The first few hours, often called the 'golden hour', are crucial for increasing the chances of recovering your money. The very first thing you should do is call the National Cyber Crime Helpline at 1930. This service can alert banks in real-time to try and freeze the fraudulent transaction. The second step is to immediately call your bank's fraud department to report the transaction and request that they block your card or account. Your third step is to file a formal complaint on the National Cyber Crime Reporting Portal at cybercrime.gov.in. Make sure to preserve all evidence, including screenshots of messages, transaction IDs, and the fraudster's phone number or UPI ID.
