Last updated: October 28, 2026
Here’s how it usually plays out. A WhatsApp message arrives that looks like it’s from your electricity company: “Your power will be cut tonight. Call this number to update your bill.” You call. The person on the line is calm and helpful, asks you to install a “support app”, and within minutes money is gone from your savings account.
The people who fall for this kind of UPI fraud aren’t careless. Most of them use UPI every single day. That’s exactly why these scams work: they don’t target people who don’t know UPI, they target people who use it so often they stop thinking about it.
A few months ago, I got a message saying my electricity bill was unpaid and my connection would be cut that very night. For a second, the panic felt real — then I noticed the sender was just a random mobile number, not my electricity company, and I deleted the message without calling back. That one pause is what saved me.
This guide covers the UPI scams that are most common in India right now, the one rule that would have stopped almost all of them, and exactly what to do (and in what order) if money has already left your account.
The one rule that stops most UPI scams
Before we get into the list, remember this: you never need to enter your UPI PIN to receive money. Not for a refund, not for a prize, not for a buyer paying you on OLX. A UPI PIN is only for sending money out of your account.
If any screen, link or person asks for your PIN so that you can “receive” something, it’s a scam. Close it. That single habit protects you from at least half the tricks below.
7 common UPI scams in India (and how each one works)
1. The “collect request” scam
You’re selling a sofa online. A “buyer” says he’ll pay right away and sends you a request on your UPI app. It looks like an incoming payment, but it’s actually a collect request, a request for you to pay him. The moment you enter your PIN, the money goes out.
How to spot it: read the screen slowly. If it says “Pay” or asks for your PIN, you are the one paying.
2. Fake QR codes
Same idea, different format. The scammer sends a QR code and says “scan this to receive ₹5,000.” Scanning a QR code is always for paying someone. Nobody can send you money through a QR code you scan.
3. Fake customer care numbers
Your payment failed, so you search Google for “PhonePe customer care number.” The top result is a fake number. The person who answers is very helpful, very polite, and eventually asks you to install a screen-sharing app or share an OTP “to process the refund.”
What to do instead: only use the help section inside the app itself, or the number printed on your bank’s official website or the back of your debit card.
4. Screen-sharing apps
Apps like AnyDesk or TeamViewer are legitimate tools, but scammers use them to watch your screen while you type your PIN or OTP. No bank, UPI app or government department will ever ask you to install one.
5. “Your KYC is expiring” or “bill unpaid” messages
This is the scam from the example at the top. The message creates panic (account blocked, power cut, SIM deactivated) and gives you a number or link. Real companies don’t threaten you on WhatsApp with a random mobile number.
6. Wrong transfer / “sent by mistake” calls
You get an SMS saying ₹3,000 has been credited, followed by a call: “Sorry, I sent it by mistake, please send it back.” Often no money was actually credited, and the SMS was fake. Always check your balance inside your bank app, not the SMS.
7. Fake investment and task groups
You’re added to a Telegram or WhatsApp group where people “earn” ₹500 for liking videos. The first few payments are real, to build trust. Then you’re asked to “invest” for a bigger task, and that money never comes back.
Quick safety checklist
| Do | Don’t |
|---|---|
| Check the name shown before you enter your PIN | Enter your PIN to “receive” money |
| Set a daily UPI limit in your app that matches how much you actually spend | Install any app a caller asks you to install |
| Use the help section inside your UPI app | Call customer care numbers from Google search or social media |
| Check your balance in the bank app | Trust SMS alerts from unknown numbers |
| Keep your phone’s screen lock and app lock on | Share OTPs, PINs or screenshots of your bank app with anyone |
Phishing emails use many of the same tricks. Our guide on how to spot a phishing email covers the warning signs in more detail.
Lost money to UPI fraud? Do these 5 things, in this order
Speed matters more than anything else here. The faster you report, the better the chance that the money can be frozen before the scammer withdraws it.
- Call 1930. This is the National Cyber Crime Helpline for financial fraud. Keep your transaction ID (UTR number), the amount, time and the scammer’s UPI ID or number ready.
- File a complaint at cybercrime.gov.in. Save the acknowledgement number. Your bank will ask for it.
- Inform your bank right away and ask them to block UPI on your account if needed. Under RBI rules, reporting an unauthorised transaction quickly (within three working days) plays a big part in whether you can get the money back.
- Raise a complaint inside your UPI app (Google Pay, PhonePe, Paytm etc.) under the specific transaction.
- Save everything. Screenshots of chats, call logs, SMS and the transaction screen. Don’t delete the scammer’s messages, even though you’ll want to.
If you get a suspicious call or message but haven’t lost money, you can report it on the government’s Sanchar Saathi portal using the Chakshu feature. It helps get those numbers blocked.
A small habit that makes a big difference
Keep a little money in your UPI-linked account and the rest in a separate savings account or FD that isn’t linked to any payment app. If something does go wrong, the damage is limited. It’s the same logic as keeping an emergency fund somewhere separate from your day-to-day money.
Personally, I keep only a small amount in the account linked to my UPI app, and I have set a low daily UPI limit that covers my usual spending. The rest of my money sits in a separate account that no payment app can touch. It takes two minutes to set up, and it means even a bad day can’t turn into a big loss.
Key takeaways
- You never need your UPI PIN to receive money.
- Scanning a QR code is always for paying, never for receiving.
- Only use customer care from inside the app or the bank’s official website.
- If you lose money, call 1930 immediately, then report on cybercrime.gov.in and to your bank.
Sources
- National Cyber Crime Reporting Portal (Ministry of Home Affairs)
- Sanchar Saathi – Department of Telecommunications
- National Payments Corporation of India (NPCI)
- Reserve Bank of India
Frequently Asked Questions
Can I get my money back after a UPI fraud?
Sometimes, yes. Your chances are best if you call 1930 and inform your bank as soon as possible, because the money can be frozen in the scammer’s account before it’s withdrawn. There’s no guarantee, which is why prevention matters so much.
Is it safe to share my UPI ID?
Sharing your UPI ID alone doesn’t let anyone take money. The risk comes when someone uses it to send you collect requests and tricks you into approving one with your PIN.
What is the cyber crime helpline number in India?
Dial 1930 for financial cyber fraud. You can also file a complaint online at cybercrime.gov.in.
Will my bank ever call and ask for my OTP or PIN?
No. Banks, UPI apps and RBI never ask for your OTP, PIN, CVV or password over a call, SMS or WhatsApp.
This article is for general awareness and is not legal or financial advice. Rules and helpline processes can change, so check official sources if you are dealing with an active fraud case.