India processes over 15 billion UPI transactions every month. Scammers know this — and they have developed specific tricks to exploit the way UPI works. The good news is that every UPI scam relies on one of a small number of patterns. Once you know them, you are protected for life.

You NEVER need your UPI PIN to receive money.

Your PIN is only needed when you are sending money. If anyone asks for your PIN to "receive" a payment, it is a scam — every single time.

How UPI Scams Work

Unlike bank account fraud, UPI scams rarely involve hacking. The scammer does not need your password or OTP. They need you to make a mistake — to enter your PIN at the wrong moment, scan the wrong QR code, or believe a fake screenshot.

The five patterns below cover over 90% of all UPI fraud cases reported in India. Each one has a tell — a specific red flag that exposes the scam before any money moves.

Red Flag 1 — The Fake Collect Request

A collect request is a feature in UPI apps that lets someone request money from you. A scammer sends you a collect request — usually for ₹1 to ₹50,000 — with a note that makes it sound like you are receiving money, not sending it.

📱 Typical collect request message
"Congratulations! You have won ₹15,000 in the RealShop Lucky Draw. Accept the collect request on your UPI app to receive your prize. Enter your PIN to confirm."

⚠️ Accepting a collect request and entering your PIN sends THEM money, not the other way around. The word "collect" means they are collecting from you.

The red flag: Any message asking you to enter your UPI PIN to receive money, a prize, a cashback, or a refund.

Red Flag 2 — The QR Code Trick

Scammers send a QR code and tell you to scan it to receive a payment. In UPI, scanning a QR code almost always initiates a payment — it does not receive one. Once you scan and enter your PIN, the money leaves your account.

This scam is common in OLX and Facebook Marketplace transactions, where a "buyer" sends a QR code saying it is for a "verification payment" that will be returned, or that it will send you the purchase amount.

💬 OLX buyer script
"Hi, I want to buy your phone. I am sending ₹500 advance via UPI. Please scan this QR code to receive it. The full amount will follow after you confirm."

The red flag: A QR code sent by someone who claims it will put money into your account. Legitimate buyers pay — they do not send QR codes for you to scan.

Red Flag 3 — The Fake Screenshot

A scammer sends you a screenshot of a payment confirmation — "Payment of ₹10,000 sent to you successfully" — before they actually pay. They use this to pressure you into releasing goods or a service before you check your actual bank balance.

This is extremely common among sellers of goods, freelancers, and landlords collecting rent from new tenants. The screenshot looks identical to a real UPI success screen.

⚠️ Never release goods, services, or access based on a screenshot. Check your actual bank balance or UPI transaction history. A screenshot proves nothing.

The red flag: Any buyer or payer who shows you a screenshot instead of waiting for you to confirm receipt in your own app.

Red Flag 4 — The Fake UPI Support Call

You receive a call from someone claiming to be Google Pay, PhonePe, Paytm, or your bank's UPI support team. They say your account has been flagged, your transaction is stuck, or you need to verify your account to receive a refund.

They then ask for your UPI PIN, linked mobile number, or ask you to generate a collect request "to verify." Sometimes they ask you to install a screen-sharing app like AnyDesk or QuickSupport to "help" you.

📞 Fake support call script
"Hello, I am calling from PhonePe customer care. Your account has been temporarily blocked due to suspicious activity. To unblock it, I need to verify your UPI PIN. This will only take a minute."

The red flag: Any support call that asks for your UPI PIN or asks you to install a remote access app. No UPI app or bank ever needs your PIN to help you — they can access your account on their own systems.

Red Flag 5 — The "Wrong Transfer" Refund Scam

A scammer sends you a small amount — say ₹100 — and then calls claiming they transferred it to you by mistake and urgently need it back. They send a collect request for a larger amount (₹5,000–₹50,000) hoping you will accept it in the confusion without checking the amount.

Sometimes the initial ₹100 is itself sent from a stolen account, meaning you are being used as a money mule without knowing it. Even the "refund" is a trap.

The red flag: A stranger who sends you money then immediately calls about it. If you want to return the money, initiate a fresh payment yourself — do not accept any collect request they send you.

How to Protect Yourself — 4 Simple Rules

PIN is only for sending. Your UPI PIN is required only when you initiate a payment. No legitimate transaction to receive money requires your PIN.
Check your app, not their screenshot. Before releasing anything of value, open your UPI app and confirm the credit appears in your transaction history.
You scan QR codes to pay, not to receive. If someone says "scan this to receive money," it is a scam. Close the conversation.
No app or bank calls you for your PIN. If a "support executive" asks for your UPI PIN, hang up and report the number to 1930.

What To Do If You've Already Paid

  1. 1 Call 1930 immediately. This is the National Cyber Crime Helpline. The faster you call, the better the chance of freezing the receiving account before the money is withdrawn.
  2. 2 File a complaint at cybercrime.gov.in. Have the transaction ID, UPI ID of the recipient, amount, and time ready. Screenshots of the conversation help.
  3. 3 Report within your UPI app. Google Pay, PhonePe, and Paytm all have in-app fraud reporting. File a dispute on the specific transaction.
  4. 4 Inform your bank. Call your bank's helpline and ask them to flag the transaction. If caught within 24 hours, some banks can initiate a reversal request.

💡 UPI fraud reports filed within 24 hours have a significantly higher recovery rate. Act immediately — every hour counts.