1. Always Verify the Recipient's Name
This is the most critical step before any transaction. When you enter a UPI ID or phone number, the app displays the legal name of the account holder. Never skip reading this name. Scammers often create UPI IDs that look deceptively similar to ones you might
know, perhaps with a single letter or number changed. If you are sending money to a friend named 'Anand Kumar' but the app shows the name 'Sunita Mehta', that is a major red flag. It means the UPI ID does not belong to the person you think it does. A quick phone call to the intended recipient to confirm their exact UPI ID or to check the name displayed on your screen can prevent a costly mistake. Do not proceed if there is any mismatch between the name you expect and the name shown by the app.
2. Understand 'Request Money' vs. 'Send Money'
One of the most common scams involves the 'Request Money' or 'Collect Request' feature. Scammers will send you a payment request, often disguised with a message claiming you are about to receive a refund, cashback, or payment for an item you're selling. They create a sense of urgency, telling you to approve the request and enter your PIN to get the money. However, approving a 'Collect Request' and entering your PIN always sends money from your account. Remember the golden rule: you never need to enter your UPI PIN to receive money. If anyone asks you to do so, it is a scam. Always read notifications carefully to see if you are being asked to 'Pay' or if you are simply being notified of a credit.
3. Never Share Your UPI PIN or OTP
Your UPI PIN is the key to your bank account. It should be treated with the same secrecy as your ATM PIN. No legitimate representative from your bank, a UPI app, or any government agency will ever ask for your UPI PIN or a One-Time Password (OTP) over a call, message, or email. Fraudsters often pose as customer support executives to trick users into sharing these details. If you share your PIN, scammers can authorize transactions without your consent. Likewise, sharing an OTP can allow them to link your bank account to a new device they control. Your PIN is only required on the official UPI PIN page within your app when you are sending money. If you are asked for it in any other context, it is a fraud attempt.
4. Be Wary of Unsolicited QR Codes and Links
Scammers frequently use malicious QR codes and phishing links to steal money. You might receive a QR code via WhatsApp or email with a message claiming you need to scan it to receive a payment or a reward. However, scanning a QR code is only ever done to make a payment, not to receive one. If you scan a fraudster's QR code and enter your PIN, money will be debited from your account. Similarly, fraudsters send phishing links via SMS or social media that lead to fake websites designed to steal your PIN or other sensitive information. These links might lead to an app that asks you to enter your PIN, or install malicious software on your phone. The safest approach is to never click on links or scan QR codes from unknown or untrusted sources.
5. Secure Your Phone and UPI App
Your smartphone is now a payment device, and it needs to be protected like one. Always use a strong screen lock on your phone, whether it's a PIN, pattern, or biometric lock like a fingerprint or face ID. Most UPI apps also offer an additional layer of security, allowing you to enable an app-specific lock. This prevents anyone who gets access to your unlocked phone from opening your payment apps. Furthermore, only download UPI apps from official sources like the Google Play Store or Apple App Store, and keep them updated. Updates often contain critical security patches that protect you from the latest vulnerabilities that fraudsters might try to exploit.
6. Regularly Review Your Transactions
Make it a habit to regularly check your transaction history within your UPI app and your bank statements. This helps you spot any unauthorized or suspicious activity quickly. Some scams can be subtle, and a small, unauthorized debit might go unnoticed if you are not paying attention. Enabling SMS and email alerts from your bank for every transaction is also a crucial early warning system. The faster you notice a fraudulent transaction, the faster you can report it to your bank and the National Cyber Crime Helpline (1930). Some banks also allow you to set your own daily transaction limits, which can be a proactive way to limit your potential losses if your account is ever compromised.
