India processes over 15 billion UPI transactions every month. Scammers know this — and they have developed specific tricks to exploit the way UPI works. The good news is that every UPI scam relies on one of a small number of patterns. Once you know them, you are protected for life.
You NEVER need your UPI PIN to receive money.
Your PIN is only needed when you are sending money. If anyone asks for your PIN to "receive" a payment, it is a scam — every single time.How UPI Scams Work
Unlike bank account fraud, UPI scams rarely involve hacking. The scammer does not need your password or OTP. They need you to make a mistake — to enter your PIN at the wrong moment, scan the wrong QR code, or believe a fake screenshot.
The five patterns below cover over 90% of all UPI fraud cases reported in India. Each one has a tell — a specific red flag that exposes the scam before any money moves.
Red Flag 1 — The Fake Collect Request
A collect request is a feature in UPI apps that lets someone request money from you. A scammer sends you a collect request — usually for ₹1 to ₹50,000 — with a note that makes it sound like you are receiving money, not sending it.
⚠️ Accepting a collect request and entering your PIN sends THEM money, not the other way around. The word "collect" means they are collecting from you.
The red flag: Any message asking you to enter your UPI PIN to receive money, a prize, a cashback, or a refund.
Red Flag 2 — The QR Code Trick
Scammers send a QR code and tell you to scan it to receive a payment. In UPI, scanning a QR code almost always initiates a payment — it does not receive one. Once you scan and enter your PIN, the money leaves your account.
This scam is common in OLX and Facebook Marketplace transactions, where a "buyer" sends a QR code saying it is for a "verification payment" that will be returned, or that it will send you the purchase amount.
The red flag: A QR code sent by someone who claims it will put money into your account. Legitimate buyers pay — they do not send QR codes for you to scan.
Red Flag 3 — The Fake Screenshot
A scammer sends you a screenshot of a payment confirmation — "Payment of ₹10,000 sent to you successfully" — before they actually pay. They use this to pressure you into releasing goods or a service before you check your actual bank balance.
This is extremely common among sellers of goods, freelancers, and landlords collecting rent from new tenants. The screenshot looks identical to a real UPI success screen.
⚠️ Never release goods, services, or access based on a screenshot. Check your actual bank balance or UPI transaction history. A screenshot proves nothing.
The red flag: Any buyer or payer who shows you a screenshot instead of waiting for you to confirm receipt in your own app.
Red Flag 4 — The Fake UPI Support Call
You receive a call from someone claiming to be Google Pay, PhonePe, Paytm, or your bank's UPI support team. They say your account has been flagged, your transaction is stuck, or you need to verify your account to receive a refund.
They then ask for your UPI PIN, linked mobile number, or ask you to generate a collect request "to verify." Sometimes they ask you to install a screen-sharing app like AnyDesk or QuickSupport to "help" you.
The red flag: Any support call that asks for your UPI PIN or asks you to install a remote access app. No UPI app or bank ever needs your PIN to help you — they can access your account on their own systems.
Red Flag 5 — The "Wrong Transfer" Refund Scam
A scammer sends you a small amount — say ₹100 — and then calls claiming they transferred it to you by mistake and urgently need it back. They send a collect request for a larger amount (₹5,000–₹50,000) hoping you will accept it in the confusion without checking the amount.
Sometimes the initial ₹100 is itself sent from a stolen account, meaning you are being used as a money mule without knowing it. Even the "refund" is a trap.
The red flag: A stranger who sends you money then immediately calls about it. If you want to return the money, initiate a fresh payment yourself — do not accept any collect request they send you.
How to Protect Yourself — 4 Simple Rules
What To Do If You've Already Paid
- 1 Call 1930 immediately. This is the National Cyber Crime Helpline. The faster you call, the better the chance of freezing the receiving account before the money is withdrawn.
- 2 File a complaint at cybercrime.gov.in. Have the transaction ID, UPI ID of the recipient, amount, and time ready. Screenshots of the conversation help.
- 3 Report within your UPI app. Google Pay, PhonePe, and Paytm all have in-app fraud reporting. File a dispute on the specific transaction.
- 4 Inform your bank. Call your bank's helpline and ask them to flag the transaction. If caught within 24 hours, some banks can initiate a reversal request.
💡 UPI fraud reports filed within 24 hours have a significantly higher recovery rate. Act immediately — every hour counts.