UPI Is Convenient — And That’s Why Criminals Love It
India processes over 15 billion UPI transactions every month. That scale also makes it the single biggest target for digital fraud in the country. In 2025, the RBI reported over 1.5 lakh UPI fraud cases worth hundreds of crores. The good news: almost every scam follows a predictable pattern, and once you know it, you become nearly impossible to fool.
The 5 Most Common UPI Scams in India Right Now
1. The “Request Money” Trap: A scammer sends you a collect request disguised as a payment. They call and say “I’m sending you ₹5,000 — just approve the request.” The request is actually asking YOU to pay THEM. Always read the screen before entering your PIN.
2. Screen Sharing Scam: Fraudsters pose as bank customer care and ask you to download AnyDesk or TeamViewer to “fix your account.” Once you share your screen, they see your UPI PIN and OTP in real time. No bank ever asks you to share your screen.
3. Fake QR Code Payments: At local shops or OLX transactions, scammers generate a QR code and say “scan this to receive your money.” Scanning a QR code on UPI means you are paying, not receiving. You can never receive money by scanning a QR code.
4. SIM Swap Fraud: Criminals visit a telecom store with fake documents and get your SIM reissued in their name. They then receive your OTPs and drain your bank account. Watch for sudden loss of mobile network — call your operator immediately.
5. Fake Customer Care Numbers: People Google “Paytm customer care” or “GPay helpline” and find fake numbers at the top. The scammer then collects your account details. Always use numbers from the official app only.
The Golden Rules That Will Never Let You Get Scammed
First: Your PIN leaves your hands, your money leaves your account. No legitimate bank, UPI app, or government official will ever ask for your UPI PIN or OTP. Not for verification, not for a refund, not for any reason.
Second: You do NOT need to enter your PIN to receive money. If someone says you need to enter your PIN to receive a payment, they are stealing from you.
Third: Collect requests are payment requests. Any notification asking you to “approve” or “accept” is asking you to pay. Read it carefully before approving.
What to Do If You’ve Already Been Scammed
Act within the first 30 minutes — your chances of recovery drop dramatically after that. Call your bank’s fraud helpline immediately and ask them to flag the transaction. File a complaint on the NPCI UPI fraud portal at escalate.npci.org.in. Call the national cyber crime helpline 1930 and file an FIR at your local police station or online at cybercrime.gov.in.
Under RBI’s limited liability rules, if you report fraud within 3 working days of receiving the communication, you may be eligible for a full refund — but only if the fault was not yours.
Safety Settings You Should Enable Right Now
Open your UPI app and enable transaction limits for individual payments. Set a daily cap that reflects your actual usage. Enable SMS alerts for every transaction. Register on the National Do Not Call registry to reduce spam calls. And consider using a separate bank account with a lower balance specifically for UPI transactions.
The Bottom Line
UPI fraud is not about sophisticated hacking — it is about social engineering. The scammer needs your cooperation to steal from you. As long as you remember that no legitimate entity ever asks for your PIN or OTP, and that scanning a QR code means paying, you are protected against 99% of fraud cases in India.
