UPI processed over 17 billion transactions in a single month in ${CY}. Its convenience is unmatched — but it has also made millions of Indians targets for increasingly sophisticated fraudsters. Understanding the scams is the first step to avoiding them.
The Most Common UPI Scams
"Collect Request" scam: A fraudster sends you a UPI collect request (asking you to pay them), but calls it a "verification" or tells you approving it will credit money to your account. Approving a collect request always debits your account. Never approve a collect request from an unknown contact.
Fake customer care: You search for a company's helpline and find a fake number SEO-optimised to appear at the top. The fraudster on the other end asks you to install a remote access app (AnyDesk, TeamViewer) or share your UPI PIN to "verify" your account. Legitimate companies will never ask for your PIN or ask you to install remote access software.
QR code fraud: A seller sends you a QR code to "receive" payment. Scanning and paying QR codes sends money — it never receives it. If you are selling something, you generate the QR code. The buyer scans it.
SIM swap: Fraudsters convince your carrier to issue a new SIM on your number, giving them access to OTPs. Signs: your phone loses signal unexpectedly. Immediately call your carrier if this happens.
Safety Rules
- Never share your UPI PIN with anyone — not "bank officials", not "Google Pay support", not family
- PIN is only for sending money, never for receiving
- Set a daily transaction limit in your UPI app settings
- Enable two-factor authentication on your linked bank account
- Use Google Pay's or PhonePe's scam detection features when prompted
- Report fraud immediately: UPI fraud helpline 1930 (national cybercrime helpline)