1. Never Share Your UPI PIN
This is the golden rule of UPI safety. Your PIN (Personal Identification Number) is a secret code for authorizing payments from your account. You will never need to enter your PIN to receive money. Scammers often pose as buyers, company representatives,
or even bank officials and create a sense of urgency to trick you into sharing it. They might claim it's needed to process a refund or credit a prize to your account. This is always a lie. Legitimate organizations will never ask for your UPI PIN or OTP (One-Time Password) over a call, SMS, or email. Treat your PIN like your physical ATM PIN—keep it private and only enter it on the official UPI PIN page of your trusted payment app when you are sending money.
2. Beware of 'Request Money' Scams
Fraudsters cleverly exploit the 'Request Money' or 'Collect Request' feature on UPI apps. They send you a payment request, hoping you'll approve it without reading the notification carefully. A common tactic involves a scammer pretending to be a buyer for an item you've listed online. They'll agree to the price and tell you they've sent the money, asking you to approve a notification to receive it. However, approving this request and entering your PIN actually sends money to them. Always read the details on your screen carefully. If it says “Pay” or mentions a “Collect Request,” you are authorizing a debit from your account. Remember, receiving money requires no action or PIN entry from you.
3. Scrutinize Every QR Code
QR codes have made payments seamless, but they are also a tool for fraud. The most critical thing to remember is that you only scan a QR code to pay someone, never to receive money. Scammers will send you a QR code via WhatsApp or email, claiming that scanning it will credit money to your account for a refund, lottery win, or payment for a used item. This is a trap. Scanning the code and entering your PIN will debit your account. Another common trick involves fraudsters pasting a fake QR code sticker over a genuine one at a shop or public place. Before paying, always verify that the recipient's name displayed in your UPI app matches the merchant you intend to pay.
4. Verify the Recipient Before Paying
Scammers often create a sense of urgency to prevent you from double-checking details. Whether you're entering a phone number, a UPI ID, or scanning a QR code, your UPI app will always display the registered name of the account holder before you finalize the payment. Take a moment to verify this name. Does it match the person or business you're trying to pay? This simple check can prevent you from sending money to a fraudster who might be using a fake UPI ID that looks similar to a legitimate one or has tricked you with a tampered QR code. If the name looks suspicious or is not what you expect, do not proceed with the transaction.
5. Avoid Unverified Links and Apps
Phishing remains a popular method for fraudsters. They send SMS messages or emails that look like they're from your bank or a trusted company, containing links that lead to fake websites or prompt you to download malicious apps. These fake sites and apps are designed to look exactly like official UPI or banking platforms to steal your PIN and other sensitive credentials. To stay safe, only download UPI apps from official sources like the Google Play Store or Apple App Store. Never click on links from unknown or suspicious sources, and avoid installing remote access apps like AnyDesk if prompted by a stranger claiming to be a customer support agent.
6. Use Official Customer Support Channels
If you face an issue with a transaction or service, do not search for customer care numbers on Google. Scammers often post fake helpline numbers online that appear at the top of search results. When you call these numbers, the fraudster on the other end will pretend to be a support executive and guide you through 'steps' that are actually designed to steal your money. They might ask you to share your PIN, download a screen-sharing app, or approve a payment request. Always find customer support details on the official website or app of the service provider. This ensures you are speaking to a legitimate representative and not a scammer.
