The Golden Rule of UPI Payments
Let's be perfectly clear: you never, under any circumstances, need to enter your UPI PIN to receive money. This is the single most important fact to remember. Your PIN is a key that authorises money to leave your account. It is exclusively for making
payments, not for receiving them. Scammers exploit a lack of awareness around this fundamental principle. They might tell you to enter your PIN to 'authorise' an incoming payment, a refund, or a cashback offer. This is always a lie. The moment you enter your PIN in response to their request, you are giving permission for your money to be debited. The National Payments Corporation of India (NPCI), which developed UPI, explicitly warns users that a PIN is only for paying, not for getting paid.
Common Scams and How They Work
Fraudsters are constantly evolving their tactics, but many popular scams rely on the same core deceptions. One of the most common is the 'Collect Request' or 'Request Money' scam. The fraudster sends you a payment request, often disguised with a message like "Enter your PIN to receive Rs 5,000." If you approve the request and enter your PIN, you are not receiving money; you are sending it to them. Another prevalent trick is the QR code scam. A scammer might send you a QR code via WhatsApp or another messenger, claiming you need to scan it to accept a payment. However, scanning a QR code is a method for making a payment, not receiving one. The app will prompt you for your PIN to complete the transaction, which results in you losing money.
Red Flags: How to Spot a Fraudulent Transaction
Vigilance is your best tool. Scammers often create a sense of urgency, pressuring you to act quickly without thinking. Be wary of anyone who rushes you into a transaction. Another major red flag is any unsolicited message from someone claiming to be from your bank, a payment app's customer service, or even the RBI, asking you to verify details or install an app to fix an issue. Official representatives will never ask for your PIN or OTP. Also, be suspicious of links sent via SMS or social media that claim to offer rewards or cashback. These often lead to fake websites designed to steal your financial information. Always double-check the recipient's name and UPI ID on the payment screen before entering your PIN.
Your UPI Safety Checklist
Adopting a few simple habits can drastically reduce your risk of falling victim to fraud. First, never share your UPI PIN or any OTPs with anyone, no matter who they claim to be. Second, only use official UPI apps downloaded from the Google Play Store or Apple App Store, and avoid installing apps from unknown sources or links. Third, enable all transaction alerts via SMS and app notifications, and review them carefully. If you see a transaction you don't recognise, report it immediately. For added security, consider using a separate bank account with a minimal balance for daily UPI transactions. Finally, if a deal online seems too good to be true or a buyer is creating unnecessary urgency, it’s best to be cautious.
What to Do If You've Been Scammed
If you suspect you have been a victim of UPI fraud, time is of the essence. The first and most critical step is to immediately call the national cybercrime helpline at 1930. This can help in trying to freeze the fraudulent transaction. Next, report the incident to your bank and request them to block the transaction and your account if necessary. You should also file a formal complaint on the National Cyber Crime Reporting Portal (cybercrime.gov.in). Finally, report the issue within the help section of your UPI app itself. Gather all relevant details, including transaction IDs, screenshots, and the scammer's UPI ID or phone number, to support your complaint.
