UPI safety rule: You enter a UPI PIN to authorise money leaving your account. You do not need a UPI PIN or QR scan to receive money.
Common versions of this scam
- A buyer asks an online seller to scan a QR code to “receive” payment.
- A caller promises a refund, cashback, reward or prize after PIN entry.
- A collect request is disguised as money being credited.
- A screen-sharing app is used to watch the victim enter payment details.
Check before approving
Read the UPI screen carefully. Confirm whether it says Pay, Send or Collect request. Check the receiver’s name and amount. If you did not start the transaction, decline it.
Safe habits
- Never share your UPI PIN, OTP or card details.
- Do not scan a QR code supplied for receiving money.
- Use the official support section inside your payment app for disputes.
- Do not approve a request while speaking to an unknown caller.
If money or account access is already lost
- Call your bank or payment provider immediately and ask them to block the transaction or account.
- Call the national cyber-fraud helpline 1930 as quickly as possible.
- File a report at cybercrime.gov.in.
- Preserve screenshots, phone numbers, UPI IDs, transaction references, emails and chat history.
Official reference
Review the NPCI UPI Safety Shield and NPCI fraud-awareness guidance.