Receiving a sudden notification to pay money when you are actually expecting to receive it is the most common red flag in UPI-based fraud. Scammers often send 'Collect Requests' disguised as payments, hoping that in your haste, you will enter your UPI PIN without checking the details.
The Golden Rule: PIN is Only for Sending Money
If you are receiving money into your account, you never need to enter your UPI PIN. The PIN is strictly a digital signature used to authorize the debiting of funds from your account. If a screen on your app asks for a PIN, you are authorizing a payment out of your account, not into it. If you are ever unsure, simply cancel the request immediately.
Check the Sender's Details
Before interacting with any notification, look closely at the request details within your UPI app (like GPay, PhonePe, or Paytm). A legitimate payment request from a business or a known contact will clearly show the sender's VPA (Virtual Payment Address) or name. Scammers often use names that mimic banks or official government departments to create a false sense of urgency. If the name looks suspicious or generic, do not proceed.
Why 'Collect Requests' are Misused
When you use the 'Request Money' feature, the app generates a link or notification that asks the other person to pay you. Fraudsters flip this by sending a request to you, hoping you mistake the 'Pay' button for an 'Accept' or 'Receive' button. Always read the text on the screen. It will explicitly say 'Requesting ₹X from you' rather than 'Sending ₹X to you.'
What to do if you suspect a scam
If you receive a suspicious request, do not click on any links and do not enter your PIN. Simply ignore or decline the request. If you have already lost money, report the transaction immediately to your bank and the official cybercrime portal. Time is critical in such cases.
Reporting Fraud
If you fall victim to a UPI scam, follow these steps:
- Call your bank’s official customer care number to block your UPI ID and account.
- File a complaint on the National Cyber Crime Reporting Portal at cybercrime.gov.in.
- Alternatively, you can dial 1930, which is the national cybercrime helpline number.
Sources
- NPCI (National Payments Corporation of India) safety guidelines regarding UPI transactions.
- RBI (Reserve Bank of India) 'BE(A)WARE' booklet on financial fraud.
- National Cyber Crime Reporting Portal (MHA, Government of India).
Need to file a formal complaint?
Use our automated utility to draft a precise Cyber Cell application and escalate to your bank's nodal officer instantly.
Open Complaint Generator