UPI Fraud Se Kaise Bachein — Complete Safety Guide 2024
UPI has made payments effortless for over 350 million Indians. But the same speed that makes it convenient also makes fraud fast. The good news: almost every UPI scam relies on one mistake from you — and once you know the pattern, they stop working.
The golden rule of UPI
You never enter your UPI PIN to receive money. Your PIN is only ever needed to send money out of your account.
If anyone asks you to enter your PIN, scan a QR code, or "approve a request" to receive a payment — it is a scam. No exceptions.
The 7 most common UPI scams in India
1. The "wrong payment" refund trick
A stranger calls saying they accidentally sent you money and asks you to return it. They send a collect request (a request for money) disguised as a refund. If you approve it, money leaves your account.
2. Fake QR code scam
On marketplaces like OLX, a "buyer" sends a QR code claiming you must scan it to receive payment. Scanning a QR and entering your PIN always sends money — never receives it.
3. Screen-sharing apps
A "bank executive" asks you to install AnyDesk or TeamViewer to "fix" an issue. They then watch your screen and steal your PIN and OTP.
4. Fake UPI handles
Scammers create handles that look official, like paytm.refund@oksbi. Always verify the name that appears before paying, not just the handle.
5. SIM swap fraud
Fraudsters get a duplicate SIM of your number, then reset your UPI and intercept OTPs.
6. Phishing links
A link claims your KYC will expire or you've won a prize. It opens a fake page that captures your card or UPI details.
7. Cashback and reward scams
You're promised cashback if you "verify" by sending ₹1 — which exposes your details and trains you to approve their requests.
A quick comparison: safe vs unsafe actions
| Action | Safe? | Why |
|---|---|---|
| Scanning a QR to pay a shop | Yes | You control the amount |
| Scanning a QR to "receive" money | No | Receiving never needs a scan |
| Entering PIN to send money | Yes | This is the normal flow |
| Entering PIN to "get a refund" | No | Refunds are automatic |
| Sharing OTP with anyone | No | Banks never ask for OTP |
What to do in the first hour if you've been defrauded
The first 60 minutes matter most. The faster you report, the higher your chance of recovery.
- Call your bank's fraud helpline immediately and freeze UPI.
- Report on the National Cyber Crime Helpline: 1930.
- File a complaint at cybercrime.gov.in.
- Keep screenshots of the transaction and any chat.
- Inform your UPI app's in-app support (PhonePe, GPay, Paytm).
The bottom line
UPI itself is safe — the weak link is always social engineering. Slow down whenever someone creates urgency, never share your PIN or OTP, and remember that receiving money never requires your PIN.
How this guide is made
Written and fact-checked by the Awareness360 editorial team from primary sources — RBI, SEBI, IRDAI, the Income Tax Department and Government of India portals — with links to the originals in the text above. Last reviewed on 1 May 2024. This is general educational information for Indian readers, not professional financial, legal or tax advice.
Spotted something out of date? Tell us and we'll correct it — see our editorial policy.