The Psychology of UPI Scams
Most Unified Payments Interface (UPI) frauds don't rely on hacking the system itself; they exploit human psychology. Scammers create a sense of urgency, fear, or greed to rush you into making a mistake. Common tactics include phishing links sent via SMS
or email that lead to fake websites designed to steal your PIN, or deceptive QR codes that debit your account instead of crediting it. Fraudsters might also pose as bank employees or customer care representatives to trick you into revealing sensitive information or installing screen-sharing apps that allow them to see your PIN. Understanding that these scams target your behaviour is the first step toward building a solid defence.
The Golden Rule: Never Enter a PIN to Receive Money
This is the single most important rule of UPI safety. You only need to enter your UPI PIN to send money or authorise a debit from your account. You never need a PIN to receive money. Fraudsters often use a feature called a "collect request," making it look like they are sending you money for a refund or a prize. When you approve the request and enter your PIN, you are actually sending them money. Always remember: if a transaction asks for your PIN, it is a payment leaving your account. Any request to enter your PIN to receive funds is a scam.
Scrutinise Every Link, QR Code, and Request
Treat all unsolicited messages with suspicion. Phishing links often contain subtle misspellings in the URL or create a false sense of urgency, like claiming your account will be blocked. Before clicking, verify the sender. Similarly, never scan a QR code from an unknown source to receive money; scanning a QR code is exclusively for making payments. Fraudsters have been known to paste their own QR codes over legitimate ones at shops. Always double-check the recipient's name displayed in your UPI app before completing the transaction to ensure the money is going to the right person.
Secure Your Digital Environment
Your smartphone is the gateway to your UPI account, so its security is paramount. Always use a strong screen lock (biometric or a complex password) to prevent unauthorized access to your device. Be wary of downloading unverified applications, especially those that ask for excessive permissions like screen sharing or access to your messages. These malicious apps can be used to monitor your activity and steal your PIN and other financial data. Stick to official app stores and only download UPI apps from trusted developers. Avoid using public Wi-Fi for financial transactions, as these networks can be insecure and expose your data to hackers.
Know the Official Recourse: What to Do If Scammed
If you suspect you have been a victim of a UPI fraud, acting quickly is critical to improving your chances of recovering the funds. First, immediately call your bank's customer service to report the fraudulent transaction and request to block your account or UPI ID. Second, report the incident on the National Cyber Crime Reporting Portal by calling the helpline number 1930 or by filing a complaint online at cybercrime.gov.in. You should also report the transaction within the UPI app itself, as most apps have a feature to report suspicious activity. For unresolved issues, you can escalate the complaint to the NPCI's dispute redressal mechanism and the Banking Ombudsman.
