5 UPI Scam Red Flags Every Indian Should Know

India processes over 15 billion UPI transactions every month. Scammers know this — and they have developed specific tricks to exploit the way UPI works. The good news is that every UPI scam relies on one of a small number of patterns. Once you know them, you are protected for life.

How UPI Scams Work

Unlike bank account fraud, UPI scams rarely involve hacking. The scammer does not need your password or OTP. They need you to make a mistake — to enter your PIN at the wrong moment, scan the wrong QR code, or believe a fake screenshot.

The five patterns below cover over 90% of all UPI fraud cases reported in India. Each one has a tell — a specific red flag that exposes the scam before any money moves.

Red Flag 1 — The Fake Collect Request

A collect request is a feature in UPI apps that lets someone request money from you. A scammer sends you a collect request — usually for ₹1 to ₹50,000 — with a note that makes it sound like you are receiving money, not sending it.

The red flag: Any message asking you to enter your UPI PIN to receive money, a prize, a cashback, or a refund.

"Please Accept the Collect Request Sent to Your UPI App" — What Does This Mean?

If you received a message or call saying "Please accept the collect request sent to your UPI app" — this is almost certainly a scam in progress. Here is exactly what is happening:

1. The scammer has already sent a collect request to your UPI ID (PhonePe, Google Pay, or Paytm).
2. They are now calling or messaging you to pressure you into opening the app and accepting it.
3. If you open the app and see a notification asking you to "Accept" — that means someone is requesting money from you, not sending it to you.
4. If you tap Accept and enter your UPI PIN, the money leaves your account immediately.

Common Scripts Scammers Use

UPI Collect Request from an Unknown Number — What to Do

If you open your PhonePe, Google Pay, or Paytm and see a collect request from someone you do not know:

1. Decline the request immediately. Tap "Decline" or "Reject" — do not enter your PIN.
2. Do not call back any number that sent you the collect request or called about it.
3. Report the UPI ID inside the app using the "Report" option on the transaction.
4. If someone is calling you right now pressuring you — hang up and block the number.

Red Flag 2 — The QR Code Trick

Scammers send a QR code and tell you to scan it to receive a payment. In UPI, scanning a QR code almost always initiates a payment — it does not receive one. Once you scan and enter your PIN, the money leaves your account.

This scam is common in OLX and Facebook Marketplace transactions, where a "buyer" sends a QR code saying it is for a "verification payment" that will be returned, or that it will send you the purchase amount.

The red flag: A QR code sent by someone who claims it will put money into your account. Legitimate buyers pay — they do not send QR codes for you to scan.

Red Flag 3 — The Fake Screenshot

A scammer sends you a screenshot of a payment confirmation — "Payment of ₹10,000 sent to you successfully" — before they actually pay. They use this to pressure you into releasing goods or a service before you check your actual bank balance.

This is extremely common among sellers of goods, freelancers, and landlords collecting rent from new tenants. The screenshot looks identical to a real UPI success screen.

The red flag: Any buyer or payer who shows you a screenshot instead of waiting for you to confirm receipt in your own app.

Red Flag 4 — The Fake UPI Support Call

You receive a call from someone claiming to be Google Pay, PhonePe, Paytm, or your bank's UPI support team. They say your account has been flagged, your transaction is stuck, or you need to verify your account to receive a refund.

They then ask for your UPI PIN, linked mobile number, or ask you to generate a collect request "to verify." Sometimes they ask you to install a screen-sharing app like AnyDesk or QuickSupport to "help" you.

The red flag: Any support call that asks for your UPI PIN or asks you to install a remote access app. No UPI app or bank ever needs your PIN to help you — they can access your account on their own systems.

Red Flag 5 — The "Wrong Transfer" Refund Scam

A scammer sends you a small amount — say ₹100 — and then calls claiming they transferred it to you by mistake and urgently need it back. They send a collect request for a larger amount (₹5,000–₹50,000) hoping you will accept it in the confusion without checking the amount.

Sometimes the initial ₹100 is itself sent from a stolen account, meaning you are being used as a money mule without knowing it. Even the "refund" is a trap.

The red flag: A stranger who sends you money then immediately calls about it. If you want to return the money, initiate a fresh payment yourself — do not accept any collect request they send you.

How to Protect Yourself — 4 Simple Rules

What To Do If You've Already Paid

1. 1 Call 1930 immediately. This is the National Cyber Crime Helpline. The faster you call, the better the chance of freezing the receiving account before the money is withdrawn.
2. 2 File a complaint at cybercrime.gov.in. Have the transaction ID, UPI ID of the recipient, amount, and time ready. Screenshots of the conversation help.
3. 3 Report within your UPI app. Google Pay, PhonePe, and Paytm all have in-app fraud reporting. File a dispute on the specific transaction.
4. 4 Inform your bank. Call your bank's helpline and ask them to flag the transaction. If caught within 24 hours, some banks can initiate a reversal request.