Digital literacy
Staying safe with UPI: six habits that stop most payment frauds
Simple, practical habits that protect you and your family from the most common UPI and online payment scams in India.
UPI has made sending money as easy as sending a message. That convenience is wonderful — and it is also why fraudsters have followed people onto their phones. The good news is that most UPI frauds depend on a small number of tricks. Learn to recognise them and you close the door on most of the risk.
1. You never need your PIN to receive money
This is the single most important rule. Your UPI PIN is only for sending money or checking your balance. If anyone asks you to enter your PIN "to receive" a payment, a refund or a prize, it is a fraud. Stop and close the app.
2. Read every request before you approve it
Fraudsters often send a "collect request" that looks like a payment to you. On your screen it will say something like "Pay" and ask for your PIN. Read the screen slowly: if it says you are paying, you are paying.
3. Be careful with QR codes
Scanning a QR code is a way to pay someone. You do not need to scan anything to receive money. Be especially careful when a buyer on an online marketplace sends you a QR code "to receive the advance".
4. Never share OTPs, PINs or screen access
No genuine bank, payment app or government office will ask for your OTP or PIN over a call, SMS or WhatsApp. Never install a "screen sharing" or "support" app at a stranger's request — it can let them see everything on your phone.
5. Check the name before you pay
When you enter a UPI ID or phone number, the app shows the registered name. Check that it matches the person or shop you mean to pay. If something feels off, send a small amount first or confirm in person.
6. Slow down when someone rushes you
Urgency is the fraudster's favourite tool: "your account will be blocked today", "the offer ends in ten minutes", "your relative is in trouble". A genuine institution will give you time. Hang up, and call back on a number you find yourself.
If something goes wrong
Act quickly. Call the national cyber crime helpline 1930 and report the fraud at cybercrime.gov.in. Also inform your bank straight away using the number on the back of your card or on the bank's official website. The sooner a report is made, the better the chance of stopping the money.
Share what you know
Many people who are new to smartphones learn from family members. Ten minutes spent going through these habits with a parent, grandparent or neighbour may be the most valuable digital help you give this year.
This article is general guidance, not financial or legal advice. Helpline numbers were correct at the time of writing; please confirm on official government websites.