₹ Dhuddu · Track your money on the go

Blog · Fintech · · 4 min read

UPI Scams in India: How to Spot Them and Stay Safe

Collect-request traps, fake helplines and look-alike QR codes: learn the common UPI scams in India, simple habits to avoid them, and what to do if you are hit.

By Dhuddu Team

Every few weeks a new UPI scam makes the rounds on family WhatsApp groups. The tricks change, but the core idea does not: a fraudster creates urgency, and you hand over money or a PIN before thinking. Here is a calm, practical guide to staying safe, and to catching trouble early if something slips through.

The one rule that covers most scams

You never enter your UPI PIN to receive money. The PIN is only for sending money or authorising a payment. If any screen asks for your PIN while you are supposed to be receiving ₹500 for the sofa you listed online, stop. That is a collect request, and approving it takes money out of your account.

Common UPI scams to recognise

1. The "collect request" trap

You list something for sale. A "buyer" says they have sent the money, but you need to approve a request to receive it. You approve, enter your PIN, and ₹5,000 leaves your account instead of arriving.

2. The wrong-transfer plea

Someone sends you ₹2,000 "by mistake" and calls begging you to send it back. Sometimes the first credit is a setup for a second trick, like a link or a fake refund page. Do not return money through a link or a number they give you. Ask your bank to handle the reversal.

3. Fake customer-care numbers

You search for a helpline after a failed payment, and the top result is a scammer's number. They ask you to install a screen-sharing app "to fix the issue". Never install remote-access apps for a stranger. Get helpline numbers only from the official app, website or the back of your card.

4. Fake payment screenshots

A shopkeeper, tenant or buyer shows a "payment successful" screen. Screenshots are easy to fake. Check your own bank SMS or app for the credit before handing over goods.

5. Malicious links and APK files

"Your electricity will be cut tonight, pay now" or "Update your KYC" messages often carry a link or an app file. Banks do not ask you to install apps from a link. Install apps only from the official store.

6. Look-alike QR codes

A QR code pasted over a shop's real one, or a QR "for receiving a refund". Scanning a QR code is for paying. If someone says you must scan to get money, it is a red flag.

Habits that make you hard to fool

  • Pause for ten seconds before any payment prompted by someone else's urgency.
  • Read the payee name on the confirmation screen before you enter your PIN. It should match the person or shop you expect.
  • Set a daily UPI limit you are comfortable with. A lower limit caps the damage if something goes wrong.
  • Keep a separate account for UPI with only what you need for the month, and keep savings elsewhere.
  • Turn on SMS or app alerts for every debit so you spot problems within minutes, not days.
  • Lock your phone and apps with a strong screen lock and app PIN.
  • Never share OTPs, PINs or card details, even with someone claiming to be from your bank.

If you have been scammed

Speed matters. Act in this order:

  1. Call 1930, the national cyber fraud helpline, and report the transaction details right away.
  2. File a complaint on the National Cyber Crime Reporting Portal (cybercrime.gov.in).
  3. Inform your bank through its official channel and ask it to block further debits and raise a dispute.
  4. Keep evidence: screenshots, transaction IDs (UTR numbers), phone numbers and chats.
  5. If you shared card or net-banking details, block the card and change passwords immediately.

Reporting quickly gives the best chance of freezing funds, though recovery is never guaranteed.

Practical takeaway: a five-minute safety check

Do this once this weekend:

  • Check your UPI apps for the daily limit and lower it if it is higher than you need.
  • Remove old linked bank accounts you no longer use.
  • Make sure debit alerts are on.
  • Save 1930 in your phone.
  • Share this list with a parent or grandparent. They are the most targeted.

Spotting trouble in your own records

Alerts help, but a monthly look at where your money went is even better. A ₹499 debit you do not recognise is easy to miss in a busy month. A tracker like Dhuddu can read your bank alerts and statements and lay out every debit in one place, so an odd payment stands out. It is free, and you can get the Android app on Google Play.

This is general information, not financial advice.

More from the blog