Guard Your UPI PIN Like a Secret
This is the golden rule of UPI. Your PIN (Personal Identification Number) is the key to your bank account, and it should be treated as such. Never share your 4 or 6-digit UPI PIN with anyone — not friends, family, or even someone claiming to be from your bank or a UPI app's
customer support. [13, 26] Banks and legitimate companies will never ask for your PIN. [13, 28] Remember, you only need to enter your PIN when you are sending money or checking your balance. You never need it to receive money. [12, 19] If someone asks for your PIN to send you a payment, it is a guaranteed scam. [23]
Understand the 'Request Money' Scam
One of the most common scams involves the 'Request Money' feature on UPI apps. [16, 28] Fraudsters will send you a payment request, often disguised as a refund or a payment they are making to you. [13, 15] This is especially common on platforms where you might be selling second-hand items. The scammer, posing as a buyer, will send you a request and tell you to approve it and enter your PIN to receive the money. [3] However, approving a 'Request Money' notification and entering your PIN does the exact opposite: it sends money from your account to theirs. [3, 23] Always read notifications carefully. If you are expecting to receive money, no PIN is ever required. [19]
Beware of QR Code Tricks
QR codes are for making payments, not receiving them. [12, 13] Scammers exploit this by sending you a QR code on WhatsApp or another messenger, claiming you will receive money after scanning it. [3, 7] When you scan the code, your UPI app will prompt you to enter your PIN to complete a payment to the scammer. [3] Another variation involves fraudsters physically replacing legitimate QR codes at shops or canteens with their own. [2, 9] Before making a payment, always verify the name of the recipient displayed on your UPI app's screen after scanning the code. [12, 14] If the name doesn't match the shop or person you intend to pay, cancel the transaction. [9]
Never Install Screen-Sharing Apps
A more invasive scam involves tricking you into downloading a screen-sharing or remote access application (like AnyDesk or TeamViewer). [10, 11, 17] A fraudster, often posing as a customer service agent from your bank or a tech company, will call with an urgent-sounding problem about your account. [10, 23] They will convince you to install an app to let them 'help' you. Once you grant them access, they can see everything on your phone screen in real-time, including when you type your PIN or receive an OTP. [10, 21] They can then guide you into authorising a transaction or simply take control and empty your account. [18] No legitimate institution will ever ask for remote access to your phone to solve a problem. [21, 23]
Spot Fake Cashback and KYC Offers
Be cautious of offers that seem too good to be true. [6] Scammers often lure students with fake cashback promises, lottery wins, or urgent KYC (Know Your Customer) update warnings. [23, 24, 28] They might send phishing links via SMS or email that lead to fake websites designed to look like your UPI app or bank's portal. [13, 17] If you enter your credentials on these pages, your information is stolen. [2, 23] Always be suspicious of unsolicited messages demanding immediate action. [28] For KYC updates, always go through your official banking or UPI app, not through links sent by strangers. [23]
What to Do If You Are Scammed
If you suspect you've been a victim of UPI fraud, act immediately. The 'golden window' for action is crucial. First, report the fraudulent transaction through the dispute or report option within your UPI app (Google Pay, PhonePe, etc.). [4] Next, call the National Cyber Crime Helpline at 1930 without delay. [4, 6] This can help freeze the transfer of funds. [4] Also, file a formal complaint on the National Cyber Crime Reporting Portal (cybercrime.gov.in). [4, 28] Finally, inform your bank about the fraud. According to RBI guidelines, if you report the unauthorised transaction within three days, your liability is zero and the bank must refund your money. [6, 25]
