The Golden Rule: Never Enter Your PIN to Receive Money
This is the most important security tip to remember. You only need to enter your UPI PIN when you are sending money or authorising a payment from your account. If someone asks you to enter your PIN to receive a refund, cashback, or any other payment,
it is a scam. Fraudsters often send a payment request and disguise it as a credit, hoping you will approve it without thinking. Always remember, receiving money requires no PIN or password.
Beware of Malicious QR Codes
QR codes are convenient for paying at shops, but fraudsters exploit this by sending fake QR codes through WhatsApp or other messaging apps. They might claim you’ve won a prize or are due a refund, prompting you to scan the code. However, scanning a fraudulent QR code can lead you to a payment page where entering your PIN will debit money from your account. A core principle of UPI safety is that you only scan QR codes to pay, never to receive money. Before authorising any payment, always verify the merchant's name that appears on your screen.
Scrutinise UPI Autopay and Mandate Requests
A particularly sneaky scam involves tricking users into authorising a UPI Autopay mandate. This might be disguised as a one-time verification for a service or a cashback offer. Once you approve the mandate by entering your PIN, you give the fraudster permission to automatically debit a set amount from your account at regular intervals. Always read the details of any mandate request carefully before approving it, checking the amount, frequency (daily, weekly, monthly), and the name of the merchant. Regularly review active mandates in your UPI app and cancel any you don't recognise.
Think Twice Before Clicking Links
Phishing remains one of the most common ways fraudsters steal information. They send messages via SMS, email, or social media with links to fake websites that look like your bank, a popular e-commerce site, or a UPI app. These pages are designed to trick you into entering your UPI PIN or other sensitive details. Never click on suspicious links from unknown senders. If you need to check on a transaction or update your account, always open your official UPI app or bank website directly.
Secure Your Phone and Your Apps
Your smartphone is now directly linked to your bank account, so you must treat it with the same security as a debit card. Use a strong screen lock (like a pattern, PIN, or biometrics) and enable the same for your UPI apps. Be cautious about apps that ask for excessive permissions, especially screen-sharing or remote access capabilities, as fraudsters can use these to see your PIN as you type it. Only download UPI and banking apps from official sources like the Google Play Store or Apple App Store to avoid malicious fake applications.
Monitor Transactions and Set Limits
Get into the habit of regularly checking your transaction history in your UPI app and your bank statements. This helps you spot any unauthorised debits quickly. Many apps also allow you to set daily transaction limits, which can minimise potential losses if your account is ever compromised. Keeping a lower balance in the account you use for frequent, small UPI payments can also be a wise strategy to limit your risk exposure.
Know How to Report Fraud Instantly
If you suspect you've been a victim of fraud, speed is critical. The first step is to call the national cybercrime helpline at 1930 to report the financial fraud immediately. Next, report the transaction within your UPI app and contact your bank to inform them of the unauthorised debit. The faster you report the incident, the higher the chances of stopping the transfer and potentially recovering the funds. Save all transaction details and complaint reference numbers.
