How UPI Works and How to Stay Safe From UPI Fraud
UPI makes payments instant, which is also why fraudsters target it. A plain guide to what happens when you pay, the tricks scammers use and how to report fraud on 1930.
Unified Payments Interface (UPI) has changed how India pays, from vegetable carts to rent. It was developed by the National Payments Corporation of India (NPCI) and launched in 2016. Understanding how it works makes it much easier to spot a scam.
What happens when you pay
- Your UPI ID (for example name@bank) or QR code identifies your bank account without revealing the account number.
- When you pay, your UPI app sends the request through NPCI's network to your bank.
- You authorise the payment with your secret UPI PIN. Your bank debits your account and the receiver's bank credits theirs, usually within seconds.
The key rule follows from this: a UPI PIN is only ever needed to send money, never to receive it.
Common UPI frauds
- Fake collect requests: a stranger sends a payment request saying it is a refund, prize or cashback. Entering your PIN sends money to them.
- QR code tricks: you are asked to scan a code to receive money. Scanning and entering a PIN always means paying.
- Fake customer care numbers: fraudsters post numbers online and ask you to install screen-sharing apps or share an OTP.
- Accidental-transfer stories: someone claims they sent money to you by mistake and pressures you to send it back, sometimes after a fake credit SMS.
Simple habits that protect you
- Never share your UPI PIN, OTP or card details, even with someone claiming to be from your bank.
- Check the receiver's name shown in the app before you enter the PIN.
- Download payment apps only from official app stores and keep them updated.
- Do not install remote-access apps at a caller's request.
- Set a daily limit in your app that matches your actual needs.
If you are defrauded
| Step | Where |
|---|---|
| Call the national cyber fraud helpline at once | 1930 |
| File a complaint online | cybercrime.gov.in |
| Inform your bank and UPI app | Official app or branch |
| Report fraud calls or SMS | Sanchar Saathi Chakshu facility |
Speed matters. Reporting within the first few hours improves the chance that the money can be frozen before it is moved on. RBI rules on limited customer liability also depend on how quickly you inform your bank, so do not wait.
Frequently asked questions
Do I need my UPI PIN to receive money?
No. A UPI PIN is needed only to send money. Anyone asking you to enter a PIN to receive money is attempting fraud.
What is the cyber fraud helpline number?
Dial 1930, the national cyber crime helpline, or file a complaint at cybercrime.gov.in.
Spotted a mistake? See our corrections policy or write to grievance@mishraworld.com.