Verify the Recipient's Name
Before you enter your PIN, every UPI app displays the legal name of the person or merchant registered with the bank account. This is your first and most crucial line of defence. Scammers often use misleading display names or UPI IDs that are just one
character off from a familiar contact. Always pause and confirm that the name displayed on the payment screen is exactly who you intend to pay. A recent mandate by the National Payments Corporation of India (NPCI) ensures that apps must show this verified bank-registered name, making it harder for fraudsters to impersonate others. If the name looks unfamiliar or doesn't match, do not proceed with the payment. Double-checking this detail can prevent you from sending money to the wrong person or a scammer.
Never Enter Your PIN to Receive Money
This is the golden rule of UPI safety: you only need to enter your UPI PIN to send money, not to receive it. Fraudsters commonly exploit this misunderstanding through various scams. They might send you a 'Collect Request' or a 'Payment Request', making it seem like you need to approve it to get paid. Approving such a request and entering your PIN will debit money from your account. Similarly, they might send a QR code and claim you need to scan it and enter your PIN to receive a refund or prize money. Remember, scanning a QR code is exclusively for making a payment. If anyone asks for your PIN to complete a credit transaction to your account, it is always a scam.
Double-Check the Amount Every Time
Scammers often rely on urgency and distraction to trick you. They might rush you during an in-person transaction or create a panic situation over the phone. In this haste, it's easy to enter an extra zero or misread the amount you are approving. Before your finger taps that 'Pay' button, take a breath and carefully review the digits on the screen. Confirm that the amount is exactly what you intend to send. Some frauds involve a scammer sending you a small, nominal amount and then requesting a much larger sum back, creating confusion. Always stay calm and verify the transaction amount before you authorise it, no matter how much pressure you feel.
Beware of Unsolicited Payment Links and Requests
Phishing remains one of the most common methods for UPI fraud. Fraudsters send deceptive emails, SMS messages, or WhatsApp texts containing links that look legitimate. These links may lead to fake websites that mimic your UPI app or bank's portal, designed to steal your PIN or other credentials. Similarly, be highly suspicious of any unexpected 'Collect Request' from an unknown person or for a transaction you don't recognise. Scammers might claim you've won a lottery or are due for a refund, using the request to pull money from your account. The safest policy is to never click on unsolicited links or approve payment requests from sources you do not know and trust explicitly.
Scrutinise QR Codes Before Scanning
QR codes are convenient, but they can also be a gateway for fraud. A fraudulent QR code can redirect you to a malicious website or automatically initiate a payment to a scammer's account when scanned. Be particularly cautious with QR codes received through email or messaging apps from unknown sources. When paying a merchant, ensure the QR code is not tampered with or pasted over with a sticker. As a reminder of the golden rule, never scan a QR code to receive money. This action is only for making payments. If you are ever unsure about a QR code's authenticity, it is safer to ask the recipient for their UPI ID or phone number and initiate the payment manually.
Use Only Official and Updated Apps
The security of your UPI transactions depends heavily on the app you use. Only download UPI-enabled apps from official sources like the Google Play Store or Apple App Store. Avoid downloading apps from third-party websites or links sent to you, as these could be counterfeit apps designed to look real but actually steal your financial data. Furthermore, keep your UPI app and your phone's operating system regularly updated. These updates often contain critical security patches that protect you from the latest vulnerabilities and fraud techniques that scammers might try to exploit. Using official, updated software is a foundational step in securing your digital financial life.
