UPI makes everyday payments fast, but speed can become a weakness when a caller creates panic. A fraudster may impersonate a bank employee, courier agent, buyer, police officer or customer-support executive and push you to “verify” an account, scan a QR code, install a screen-sharing app or enter a UPI PIN.
The safest response is not to become afraid of digital payments. It is to slow the transaction down and verify what the app is asking you to approve. This practical checklist explains the difference between paying and receiving money, the common pressure tactics used in UPI scams, and the immediate reporting steps available in India.
## 1. Remember what a UPI PIN actually authorises
A UPI PIN is used to approve money leaving your account. You do not need to enter it simply to receive money. If a person says you must type your PIN to accept a refund, prize, salary, marketplace payment or government benefit, stop and inspect the request.
Read the confirmation screen before entering the PIN. Check the payee name, UPI ID and amount. A familiar logo, profile picture or display name is not sufficient proof of identity.
## 2. Treat “collect” requests as payment requests
A collect request can appear like an incoming transaction, but accepting it may authorise a debit. Do not approve an unexpected request merely because the caller says it will credit your account.
Open your UPI app independently, without following the caller’s instructions. If the request is unclear, reject it and verify through the organisation’s official website or phone number.
## 3. Do not scan a QR code to receive money
Scanning a merchant or individual QR code normally identifies whom you are about to pay. A buyer does not need you to scan their QR code so they can send you money.
This is especially important on resale marketplaces. A supposed buyer may send a small “test” transaction, gain trust and then ask you to scan a code for a larger payment. Check the transaction direction every time.
## 4. Never share OTPs, PINs or screen access
Banks and payment providers do not need your UPI PIN, card PIN, OTP or remote access to solve a complaint. Do not install an app because an unsolicited caller tells you it is required for KYC, a refund or technical support.
Screen-sharing and remote-control tools can expose notifications, balances and authentication steps. End the call, remove unrecognised access and contact the bank through an independently verified channel.
## 5. Verify customer-care numbers independently
Search advertisements, sponsored results and social-media comments can contain fake helpline numbers. Use the phone number inside the bank or payment app, the bank’s official website, or the number printed on a verified statement or card.
Do not trust a caller merely because they know your name, bank or recent purchase. Personal information can come from leaked records, public profiles or a previous phishing interaction.
## 6. Pause whenever urgency enters the conversation
Fraud scripts often create a deadline: your account will be blocked, police will arrive, a parcel contains illegal goods, electricity will be disconnected, or an investment window will close.
Urgency is a reason to slow down. Disconnect and speak to a trusted person. A legitimate organisation will allow you to verify its identity and will not require secrecy while you transfer funds.
## 7. Check the UPI ID, not only the display name
Before paying a new recipient, compare the full UPI ID and verified payee name with information obtained from a trusted source. If a business changes its payment address unexpectedly, confirm through a known contact.
For large or unusual payments, make a small test transfer only after verification. Do not let the test replace proper identity checks.
## 8. Use device and app security controls
Keep the phone operating system and payment apps updated. Use a strong device lock, enable SIM protection where available and review app permissions. Avoid making sensitive payments on a rooted, modified or shared device.
Turn on bank transaction alerts. Fast alerts help you recognise an unauthorised debit and begin reporting immediately.
## 9. Separate banking from suspicious conversations
Do not continue a video call or screen share while opening a banking app. Do not copy codes from a message into an unknown webpage. If someone is guiding every tap, they are controlling the decision even if they cannot physically touch the phone.
Close the conversation, clear the screen and start a fresh session through the official app.
## 10. Know the difference between a failed payment and a fraud
### Failed or pending transaction
The recipient has not received money, but the app shows pending or failed. Use the app’s transaction-history complaint option and the bank’s official support channel. Do not pay again solely because a stranger sends a screenshot.
### Suspected fraud
You authorised a payment under deception, or an unknown debit appeared. Contact the bank immediately and report the financial cyber fraud through India’s national system.
| Situation | Safest first action |
|—|—|
| Unexpected collect request | Reject it and verify independently |
| QR code sent “to receive money” | Do not scan it |
| Caller requests PIN, OTP or screen share | Disconnect immediately |
| Unknown debit | Contact bank and call 1930 |
| Pending payment | Use official in-app complaint support |
## 11. Report financial cyber fraud immediately
The Indian Cybercrime Coordination Centre states that financial cyber fraud can be reported through the national helpline 1930. Complaints initiated through the helpline should also be completed on the National Cybercrime Reporting Portal at cybercrime.gov.in.
Also contact your bank or payment provider immediately. Preserve the transaction ID, amount, time, recipient UPI ID, phone numbers, messages, screenshots and complaint reference. Do not edit screenshots or delete the conversation before recording evidence.
## 12. Build a family payment rule
Agree on a simple rule: no urgent transfer, new beneficiary or remote-access installation without a second-person check. Create a verified list of bank and card helplines for parents or less-confident users.
A thirty-second call to a family member can interrupt the emotional pressure on which many scams depend.
## Final checklist
– Enter a UPI PIN only after confirming that you intend to pay.
– Reject unexpected collect requests.
– Never scan a QR code merely to receive money.
– Never share a PIN, OTP or screen.
– Verify support contacts independently.
– Report suspected financial cyber fraud immediately through the bank, 1930 and cybercrime.gov.in.
UPI safety is not about memorising every new scam. It is about recognising the unchanging pattern: pressure, impersonation and an attempt to make you authorise something before you verify it.
Explore more practical technology explainers and free digital tools on AditsBlogs, and share this checklist with anyone who uses UPI but may not recognise a collect-request or remote-access trap.
AUTHORITATIVE SOURCES
- https://www.rbi.org.in/commonman/english/scripts/PressReleases.aspx?Id=3232
- https://www.rbi.org.in/commonman/english/scripts/rbikehtahai.aspx
- https://i4c.mha.gov.in/ncrp.aspx
- https://i4c.mha.gov.in/FAQ.aspx
- https://cybercrime.gov.in/
FREQUENTLY ASKED QUESTIONS
Do I need a UPI PIN to receive money?
No. A UPI PIN authorises a debit from your account. Review any request that asks you to enter it.
Can scanning a QR code credit my account?
A QR code generally identifies the recipient you are about to pay. Do not scan an unknown code merely to receive money.
What should I do after a fraudulent UPI payment?
Contact your bank immediately, call 1930 and complete the complaint at cybercrime.gov.in. Preserve transaction evidence.
Is every pending transaction a fraud?
No. Use the app’s official complaint route for a pending or failed transaction. Fraud involves deception or an unauthorised debit.
Can a bank employee ask for my OTP or UPI PIN?
Do not share authentication credentials with a caller. End the call and contact the bank through an independently verified official channel.
Build a Better SEO System for Your Blog
Use better keyword research, clearer content structure, and smarter internal links to turn your blog into a stronger traffic asset.
Recommended AditsBlogs Guides
Continue with these useful resources.
About Aditya Singh
I write content on Blogging, Digital Marketing, Tech, and Life- skills. I also write Poetry and Short-Stories in my free time.
