The Golden Rule of Digital Payments
Before diving into specific scams, it's crucial to understand one foundational rule: you never need to enter your UPI PIN or approve a transaction to receive money. Nearly every major payment scam is designed to make you forget this. Fraudsters create
a sense of urgency, excitement, or fear to rush you into authorising a payment under the false pretence that you are getting a refund, a prize, or a payment from a buyer. If anyone asks you to enter your PIN to receive funds, it is a scam. Remember, your PIN is only for sending money from your account.
Decoding Phishing and Smishing Attacks
Phishing involves deceptive emails, text messages (smishing), or social media messages that contain malicious links. These messages often look official, mimicking banks, e-commerce sites, or even government agencies. They might warn that your account will be suspended, your KYC is incomplete, or that a suspicious transaction has occurred. The goal is to get you to click a link leading to a fake website that looks identical to the real one. If you enter your username, password, or bank details on this fake page, the scammer captures them. To protect yourself, always inspect the URL before clicking. Look for spelling mistakes or unusual domain names. Instead of clicking a link in an unsolicited message, go directly to the official website or app through your browser.
The QR Code Trap: Scan to Pay, Not to Receive
QR codes have simplified payments for merchants and consumers alike, but they are also a tool for fraud. The most common QR code scam involves a fraudster sending you a QR code and claiming you must scan it to receive money. This is false. Scanning a QR code is exclusively for making a payment. When you scan the code and enter your UPI PIN, you are authorising money to be debited from your account. Scammers often use this trick on online marketplaces, where they pose as buyers and convince sellers to scan a QR code to 'receive' payment for an item. Another tactic involves fraudsters placing their own QR code sticker over a legitimate merchant's code to divert payments to their account. Always verify the recipient's name displayed on your UPI app after scanning a code and before entering your PIN.
Beware of Fake Customer Support and Impersonation
If you face an issue with a transaction, be wary of searching for customer care numbers online. Scammers often create fake helpline numbers and websites that rank high in search results. When you call, the fraudster, posing as a support executive, will try to extract sensitive information like your card number, CVV, OTP, or UPI PIN. They may also persuade you to install screen-sharing apps like AnyDesk or TeamViewer, allowing them to see your screen and record your credentials as you enter them. Never share your PIN or OTP with anyone, including someone claiming to be from your bank. Legitimate banks and service providers will never ask for this information. Always use the official customer support channels listed on the bank's or company's official website or app.
General Habits for Strong Financial Security
Beyond avoiding specific scams, good digital hygiene is essential. Use strong, unique passwords for different financial apps and enable two-factor authentication (2FA) wherever possible. The Reserve Bank of India (RBI) mandates 2FA for digital transactions, which provides a crucial layer of security. Regularly review your bank and transaction statements for any unrecognised activity. Never rely on payment confirmation screenshots from a buyer, as these can be easily faked. Always confirm that money has been credited to your account through your own banking app. Finally, be suspicious of any deal that seems too good to be true, such as massive discounts on popular products, as these are often lures for fraudulent websites.
