Summary
Fraudsters may impersonate banks, buyers, support staff or officials and pressure users to scan a QR code, approve a collect request or enter a UPI PIN.
What this alert explains
This alert explains common UPI collect-request and QR-code deception, what a UPI PIN authorises and the immediate reporting steps after financial loss.
Who it affects
Anyone using a UPI app, particularly customers receiving unexpected payment requests, refund claims, buyer messages or urgent calls.
Remember what the UPI PIN does
- A UPI PIN authorises a payment from your account
- You do not need to enter a UPI PIN merely to receive money
- Enter the PIN only on the authorised UPI PIN page inside your trusted app
- Never tell the PIN to a caller, message sender or support agent
Practical customer actions
- Check the receiver name displayed after entering or scanning the UPI ID
- Read the transaction purpose and amount before approving
- Reject unexpected collect requests
- Do not install screen-sharing or remote-access apps on instructions from an unknown person
If money has been lost
- Immediately call 1930 for financial cyber fraud
- Inform the bank or payment provider through an official channel
- Report at cybercrime.gov.in
- Preserve the UTR or transaction ID, screenshots, chats, numbers and URLs
Checklist
- Stop when a caller creates urgency.
- Verify independently using a known official number.
- Never scan a QR code solely to receive money.