UPI has made paying as easy as scanning a code, and billions of payments go through it every month. But that same speed is exactly what criminals use. One wrong tap, and money can leave your account in seconds. That is what UPI fraud is: tricking you into sending money, or into sharing the details that let someone else send it.
The good news is that almost every UPI fraud uses one of a few tricks. Once you know them, they are easy to spot. This guide covers the 12 most common types of UPI fraud, simple habits that keep you safe, and exactly where to file a UPI fraud complaint if something goes wrong. When you finish, try our free cyber safety quiz to test yourself.
Is UPI safe?
Yes, UPI itself is safe. Every payment needs your phone, your registered SIM and your secret UPI PIN, and banks run fraud checks in the background. Almost all UPI fraud happens because a person is tricked into approving a payment or sharing a PIN or OTP, not because the system was hacked.
So the best protection is not a special app. It is knowing the tricks.
The one rule that stops most UPI fraud
Your UPI PIN is only for sending money. You never need it, or a QR scan, to receive money.
If anyone asks you to enter your PIN, scan a code or “approve” a request so that money can come to you, stop. That request will take money from you.
12 common types of UPI fraud
1. The fake collect request
A stranger says they want to pay you, for something you are selling online or as a “refund”. You then get a UPI notification. It looks like an incoming payment, but it is a collect request: a request for you to pay them. Tapping “Pay” and entering your PIN sends your money away.
Stay safe: read every UPI pop-up carefully. If it says Pay or asks for your PIN, you are the one paying. Decline requests you did not expect.
2. “Scan this QR code to receive money”
The buyer sends a QR code and tells you to scan it to receive the payment. Scanning a QR code and entering your PIN always sends money.
Stay safe: scan a QR code only when you want to pay someone. To receive money, just share your UPI ID or your own QR code.
3. Fake customer care numbers
A payment failed, so you search online for the app’s or bank’s helpline. The number you find was posted by fraudsters. The friendly “agent” asks for your PIN or OTP, or tells you to install an app “to fix the problem”.
Stay safe: take helpline numbers only from the official app, the official website or the back of your card. Real support staff never ask for your PIN, OTP or password.
4. Screen-sharing apps
The caller asks you to install a remote-access or screen-sharing app. Once it runs, they can watch everything on your screen, including OTPs and your PIN as you type it.
Stay safe: never install an app because a caller tells you to. If you already did, uninstall it at once and call your bank.
5. Phishing links
An SMS, email or WhatsApp message carries a link to a page that looks exactly like your bank or a famous shopping site. Whatever you type there, such as your card number, OTP or UPI PIN, goes straight to the criminals.
Stay safe: do not open payment or banking pages from links in messages. Type the address yourself or use the official app.
6. The “accidental payment” trick
You get a message saying someone sent you money “by mistake”, then a desperate call asking you to send it back. Often no money came at all. The SMS was fake, or the “payment” was really a collect request.
Stay safe: open your bank app and check your real balance. Never trust an SMS or a screenshot. If money truly arrived by mistake, ask the sender to go through their bank.
7. Fake payment screenshots
This one targets shopkeepers and sellers. The buyer shows a “payment successful” screenshot, or a fake SMS, and leaves with the goods. No money arrived.
Stay safe: confirm every payment in your own UPI or bank app, or on your payment soundbox, before handing over goods.
8. Prize, cashback and lottery messages
“Congratulations! You won ₹25,000. Pay a small fee to claim it.” Real prizes never ask you to pay first, and they never need your PIN.
Stay safe: ignore prizes you never entered for, and never pay a fee to receive money.
9. Fake KYC and bill alerts
An SMS says your bank account will be blocked, or your electricity cut tonight, unless you “update KYC” or call a number. The link opens a fake page, or the caller asks for a payment or OTP.
Stay safe: banks and electricity boards do not threaten same-day action through random messages. Open the official app or website yourself.
10. Part-time job and “task” scams
You are offered easy money for liking videos or writing reviews. At first small payments arrive, which builds trust. Then you are asked to “invest” or pay a deposit to unlock bigger tasks, and the money disappears.
Stay safe: a real job never asks you to pay to earn.
11. SIM swap and fake app files
Criminals get a duplicate SIM for your number, or trick you into installing an APK file (an app file sent on WhatsApp or SMS, such as a fake “wedding invitation” or “bill”). Either way they can read your OTPs.
Stay safe: install apps only from the official Play Store or App Store. If your phone suddenly shows “no network” for a long time, call your mobile operator and bank at once.
12. The “digital arrest” call
Someone claiming to be from the police, CBI, customs or a court says your parcel or account is linked to a crime. They keep you on a video call for hours, tell you not to speak to anyone, and demand money to “clear your name”.
Stay safe: the government’s Indian Cyber Crime Coordination Centre has said clearly that officials do not arrest anyone over a video call. “Digital arrest” has no basis in law. Hang up and call 1930.
How UPI frauds happen: the three feelings they use
Almost every UPI scam works by pushing one of three feelings so you act before you think:
- Fear: “Your account will be blocked”, “You will be arrested”.
- Greed: “You won a prize”, “Earn ₹5,000 a day from home”.
- Kindness or hurry: “I sent money by mistake, please return it fast”.
Whenever a message makes you feel scared, excited or rushed about money, treat it as a warning sign. Take a breath and check with your own bank app.
Is it safe to share your UPI ID?
Yes, mostly. Your UPI ID (like name@bank) only lets people send you money or send you a request. Nobody can take money from you with your UPI ID alone. Problems only start if you approve a request or enter your PIN, so share your UPI ID freely, but read every request you receive.
10 habits that keep your money safe
- Never share your UPI PIN, OTP, CVV or passwords with anyone.
- Read every UPI screen before entering your PIN. Pay means money is leaving.
- Check the receiver’s name that appears before you confirm a payment.
- Install apps only from the official app stores.
- Turn on the app lock for your UPI and banking apps.
- Set a sensible daily UPI limit in your app.
- Do not open links in unexpected SMS, emails or WhatsApp messages.
- Avoid paying over free public Wi-Fi. Use mobile data instead.
- Keep your phone and apps updated, because updates fix security holes.
- Teach these rules to your parents and grandparents, who are often targeted.
How to file a UPI fraud complaint
Act fast. The sooner you report, the better the chance of freezing the money before it moves on.
- Call 1930, the national cyber fraud helpline. It works across India, day and night.
- Report online at cybercrime.gov.in and save the acknowledgement number.
- Call your bank’s official helpline. Ask them to block your UPI, cards or account if needed, and register a fraud complaint.
- Raise a complaint in your UPI app through its help section.
- Keep proof: screenshots, transaction IDs, the fraudster’s phone number and UPI ID.
- Report the fraud number on the government’s Sanchar Saathi portal so it can be blocked.
- Not solved in 30 days? If your bank does not resolve your complaint within 30 days, or you are not happy with the reply, you can complain to the RBI’s Integrated Ombudsman at cms.rbi.org.in or call the RBI helpline 14448. Under the scheme in force from July 2026, file it within 90 days after that 30-day period ends.
Can UPI fraud money be recovered?
Sometimes, yes, but it is never guaranteed. When you report quickly through 1930 or cybercrime.gov.in, the complaint goes to the banks involved, which can put a hold on the money if it is still in the fraudster’s account. After that, release of the money usually follows the police and legal process, which can take time.
Under RBI rules, if an unauthorised transaction happens because of a fault in the system or a breach by someone else, and you tell your bank within three working days, your liability can be zero. If you report later, your liability is limited but may not be zero. Payments you approved yourself after being tricked are much harder to recover, which is why prevention matters most.
Sent money to the wrong UPI ID?
This is not fraud, but it is a common worry:
- First, call or message the person politely if you know them, and ask them to return it.
- Raise a dispute in your UPI app and inform your bank with the transaction ID.
- The banks can contact the receiver, but they usually cannot take the money back without the receiver’s agreement.
- If your bank does not help within 30 days, you can approach the RBI Ombudsman.
To avoid it, always check the receiver’s name on the screen before you enter your PIN.
Why was my bank account frozen after a UPI payment?
Many people search for “UPI fraud account freeze” because their own account was suddenly blocked. This usually happens when money in your account is linked to a fraud complaint, for example because a customer paid you with stolen money, often without you knowing.
If this happens:
- Visit your bank branch and ask for the complaint details: the complaint or acknowledgement number and the police station that asked for the hold.
- Ask whether only the disputed amount is on hold or the whole account.
- Contact that police station and share proof that your transaction was genuine, such as an invoice, chat or delivery record.
To protect yourself, avoid accepting payments from unknown people for things you are not actually selling.
Frequently asked questions
What is the UPI fraud complaint number?
Call 1930, the national cyber fraud helpline, and also call your own bank’s official helpline. You can file online at cybercrime.gov.in.
Can UPI fraud be reversed?
A completed UPI payment cannot be “undone” by you, but quick reporting can freeze the money in the receiving account. Whether you get it back then depends on the investigation.
Is it safe to share my UPI ID?
Yes. Someone with your UPI ID can only send you money or a request. Never approve a request or enter your PIN unless you are the one paying.
Do I need my UPI PIN to receive money?
No, never. If anyone says you must enter your PIN or scan a code to receive money, it is a scam.
Do banks ever ask for my OTP or UPI PIN?
No. Banks, payment apps, the RBI and the police never ask for your OTP, UPI PIN, CVV or passwords.
The bottom line
Every UPI fraud needs you to do one thing for it: enter your PIN, scan a code, share an OTP, install an app, or send money in a panic. Slow down, read the screen, and check with your own bank app. If something feels urgent, frightening or too good to be true, stop.
Now test yourself with our cyber safety quiz, explore more tech and safety quizzes, or read our guide to a good CIBIL score.
Sources
More guides
Health Insurance in India: What Mediclaim Covers and Key Terms9 min to read
NEFT vs RTGS vs IMPS vs UPI: Difference, Limits and Speed9 min to read
Good CIBIL Score: Range, How It Works and 9 Ways to Improve It11 min to read Found something wrong? Write to utsav8073@gmail.com and we will fix it.