Never share your PIN
Keep your UPI PIN, OTP, passwords and banking authentication details private.
DIGITAL PAYMENT AWARENESS
Your money.
Your control.
Your safety matters.
Learn how to recognize payment fraud, protect your UPI account, verify transactions and respond quickly if something goes wrong.
Practical guidance for everyday UPI users
THE ESSENTIALS
Remember these four rules
A few careful habits can help you avoid common digital payment scams.
Verify before paying
Check the displayed recipient and amount before authorizing a transaction.
Reject unexpected requests
Do not approve unfamiliar collect requests, mandates or payment instructions.
Act quickly if something happens
Contact your bank immediately if you notice unauthorized activity or suspect fraud.
URGENT ACTION
Think you've been scammed?
Contact your bank immediately and report suspected cyber financial fraud through India's official reporting channels. Fast reporting can help authorities and financial institutions respond.
The Indian National Cyber Crime Reporting Portal identifies 1930 as the helpline for immediate reporting of cyber financial fraud. Official portal.
1
Contact your bank
Use the official app or verified bank helpline to report the unauthorized transaction and ask about securing your account.
2
Report the financial fraud
Call 1930 promptly and follow the official process. Complete the online complaint process as instructed.
3
Preserve your evidence
Keep transaction references, bank alerts, relevant messages, phone numbers and complaint acknowledgement details.
4
Secure your devices and accounts
Follow your bank's advice, remove suspicious apps, secure your email and phone, and change compromised credentials through official channels.
Do not pay anyone who promises guaranteed recovery of stolen money. Beware of follow-up recovery scams.
KNOW THE WARNING SIGNS
Common UPI scams and how to avoid them
Fraudsters may create urgency, impersonate trusted people or manipulate payment steps. Learn what to look for and what to do instead.
01
QR CODE FRAUD
Fake QR codes and refund scams
Someone claims that scanning a QR code and entering your PIN is necessary to receive a refund, prize or payment.
Protect yourself
Do not authorize a transaction to receive money. Scan only when you intend to pay and verify the details shown in your app.
02
FAKE PAYMENT PROOF
Fake screenshots and SMS alerts
A buyer or customer shows an edited screenshot or message claiming that a payment has been completed.
Protect yourself
Check your own UPI app and bank statement. Do not hand over goods based only on a screenshot or the other person's phone.
03
COLLECT REQUEST
Unexpected payment requests
A request appears in your app asking you to authorize a payment that you did not expect.
Protect yourself
Read the request carefully. Decline unfamiliar requests and verify with the person or business through a trusted channel.
04
IMPERSONATION
Fake bank or customer support
A caller pretends to be a bank employee, payment app representative, police officer or customer support agent.
Protect yourself
Never disclose your PIN or OTP. End suspicious calls and contact the organization using its official details.
05
REMOTE ACCESS
Screen-sharing and remote-control apps
A stranger asks you to install an app or share your screen to fix a payment, complete a refund or verify your account.
Protect yourself
Do not grant remote access to unknown people. If you already did, disconnect, remove the access and contact your bank if financial information may be exposed.
06
PHISHING
Fake links, apps and websites
A message asks you to update KYC, unblock an account, claim cashback or resolve a payment through an unfamiliar link.
Protect yourself
Avoid unexpected links and APK files. Open the official app or type the verified website address yourself.
07
SIM AND ACCOUNT TAKEOVER
SIM swapping and number misuse
Criminals attempt to take control of a mobile number or exploit access to your phone, messages or accounts.
Protect yourself
Contact your telecom provider if your SIM unexpectedly stops working. Secure your bank, email and phone accounts promptly.
08
SOCIAL ENGINEERING
Urgent threats and emotional pressure
A person pressures you to transfer money immediately, claims a family member is in trouble or threatens account suspension.
Protect yourself
Pause. Independently verify the person's identity and the situation before sending money or sharing information.
09
RECOVERY SCAM
Promises to recover stolen money
Someone contacts you after a fraud and promises guaranteed recovery in exchange for an advance fee or secret information.
Protect yourself
Do not pay recovery agents or disclose authentication details. Follow up only through your bank, police and official reporting channels.
10
FAKE INVESTMENT
Guaranteed returns and fake rewards
An offer promises guaranteed profits, cashback, lottery winnings or rewards in return for an advance payment.
Protect yourself
Independently verify the company and offer. Do not send money merely to unlock a supposed reward or profit.
11
MERCHANT FRAUD
Fake merchant QR replacement
A payment QR displayed at a shop or service location may have been replaced or altered by an unauthorized person.
Protect yourself
Verify the merchant name displayed in your payment app. Businesses should inspect their payment displays regularly.
12
MALICIOUS MANDATES
Unwanted AutoPay mandates
You are persuaded to approve a recurring payment mandate without understanding its merchant, amount or schedule.
Protect yourself
Read mandate details before approving. Review active mandates in your app and cancel unwanted ones through the supported official process.
YOUR SECRET STAYS SECRET
Understand your PIN, OTP and payment approval
Fraudsters often try to make a genuine payment appear to be a verification step. Understand what you are authorizing before entering a code.
Enter a UPI PIN only in the genuine payment app when you intend to authorize the transaction shown.
UPI PIN
A secret code used to authorize applicable UPI transactions. Never tell it to a caller, merchant or supposed support agent.
One-time password
A verification code used in certain authentication processes. Never disclose it to an unknown person or enter it into a website reached through a suspicious link.
App and screen-lock passwords
Use unique, hard-to-guess credentials. Do not reuse banking passwords across unrelated websites.
Payment requests and mandates
Read the amount, recipient, frequency and terms. Decline anything you did not initiate or cannot verify.
BEFORE YOU AUTHORIZE
Follow the STOP–CHECK–CONFIRM method
Build a simple verification routine before every unfamiliar or important payment.
Stop
Pause when a request creates urgency, fear or pressure. Do not rush because someone says your account will be blocked.
Take a closer look
Check the recipient, amount, request type, payment purpose and any recurring mandate details shown in your app.
Obtain independent confirmation
Contact the person or business through a known phone number or official channel if anything is unexpected.
Proceed only if verified
Authorize the payment only when you understand it and intend to make it. Otherwise, cancel or decline.
FOR SHOPKEEPERS AND BUSINESSES
Keep your business payments safe
Merchants and service providers can also be targeted through fake payment proof, QR replacement and social-engineering scams.
- ✓ Verify incoming payments through your own bank or official merchant application.
- ✓ Do not release goods or services solely because a customer displays a screenshot.
- ✓ Inspect displayed QR codes regularly and replace damaged or suspicious displays.
- ✓ Restrict access to the phone or device used to manage business payments.
- ✓ Reconcile transaction records and receipts when reviewing daily sales.
- ✓ Train staff to identify impersonation, unexpected refund requests and fake support calls.
PAYMENT VERIFICATION
Trust your transaction records
A screenshot can be edited. A message can be misleading. Confirm the payment through the official system you use to receive funds.
✓
Check the actual transaction
Review your own app or bank record.
✓
Match the amount
Confirm the expected amount was received.
✓
Keep records
Retain appropriate transaction references.
PROTECT YOUR DIGITAL LIFE
Secure your phone, SIM and accounts
Payment safety also depends on protecting the device, mobile number and accounts used to access your financial services.
Protect your phone
- Use a strong screen lock.
- Install system updates promptly.
- Download apps only from trusted sources.
- Remove applications you no longer need.
Protect your SIM
- Never share SIM verification codes.
- Contact your operator if service unexpectedly disappears.
- Use the operator's official process to secure a lost SIM.
- Report a lost phone and secure relevant accounts quickly.
Protect your accounts
- Use unique passwords where applicable.
- Secure the email account used for banking alerts.
- Review account alerts and transaction history.
- Never approve authentication prompts you did not initiate.
COMMON QUESTIONS
UPI safety FAQs
Quick answers to common questions about secure payments and fraud prevention.
Do I need my UPI PIN to receive money?
You do not need to disclose your UPI PIN to another person to receive money. Never enter a PIN merely because someone says it is needed to receive a refund, prize or incoming payment.
Is it safe to scan any UPI QR code?
No QR code should be trusted automatically. Check the recipient and transaction details shown in your app. Proceed only if you intend to pay that recipient.
What if I shared an OTP or UPI PIN?
Contact your bank immediately if you believe the information could be used to access your account or authorize a transaction. Follow the bank's instructions to secure the account and report any unauthorized activity.
What should I do if a UPI payment is pending?
Check the status in your app and verify whether the amount was debited. Avoid repeating the payment while its outcome is uncertain. Follow the app or bank's stated resolution process.
Can I get money back after a UPI scam?
Recovery is not guaranteed. Report suspected fraud immediately to your bank and the official cyber financial fraud reporting channel. Provide accurate transaction details and preserve your complaint references.
Where can I report cyber financial fraud in India?
Call the national cyber financial fraud helpline at 1930 promptly and visit the National Cyber Crime Reporting Portal. Also notify your bank immediately.
How can I check whether a payment was received?
Check your own UPI app transaction history and bank account records. Do not rely solely on screenshots, messages or the payer's device.
Is a caller from my bank allowed to ask for my UPI PIN?
Never disclose your UPI PIN to a caller or supposed support agent. End the call and contact the bank through a verified official channel if you are uncertain.
TRUSTED INFORMATION
Official safety and reporting resources
Use official sources for payment guidance, complaints and cybercrime reporting.
FRAUD AWARENESS
NPCI Fraud Awareness
Learn about common digital payment fraud patterns and practical precautions.
Visit NPCI PAYMENT GUIDANCENPCI UPI FAQs
Read official information about UPI, PINs, transactions and complaints.
Read FAQs COMPLAINTSNPCI Complaint Facility
Find the official transaction complaint facility and complaint status options.
Visit NPCI CYBERCRIME REPORTINGNational Cyber Crime Portal
Report cybercrime and follow the official government reporting process.
Report online BANKING AWARENESSReserve Bank of India
Find official banking guidance, customer awareness and regulatory information.
Visit RBI
STAY ALERT. STAY INFORMED.
View official resources
Pause before you pay.
Protect your PIN, verify every transaction, question unexpected requests and report suspicious activity promptly.
UPI QR Studio provides general educational information and is not a bank, law-enforcement agency or emergency response service. Procedures and remedies may vary by bank, payment provider and circumstances. For suspected fraud, contact your bank and use official reporting channels without delay.