How to Identify a UPI Scam — Warning Signs & What to Do

UPI has made moving money in India instant and effortless — and that same speed is exactly what scammers rely on. Most UPI fraud today doesn't involve stealing your PIN directly. It relies on tricking you into approving a request yourself, often in under ten seconds, before you've had time to read what you're confirming.

What is a UPI collect-request scam?

A "collect request" asks money fromyou rather than sending it to you — but it's often disguised to look like the opposite. A scammer sends a collect request framed as a refund, a cashback claim, or a payment for something you supposedly sold online, hoping you'll tap "Approve" on autopilot and enter your PIN without checking the direction of the transaction.

Common warning signs

• A request arrives from an unfamiliar number, often right after you post something for sale online.
• Urgency language — "approve now or the offer expires," "complete within 2 minutes."
• It's framed as a refund, cashback, or reward you didn't request.
• The requested amount is small and specific, designed to feel low-risk.
• You're asked to "verify" your account by entering your UPI PIN — a PIN is never needed to receive money, only to send or approve a payment.
• Pressure to stay on a call or screen-share app while you complete the transaction.

A typical example

You list an old phone on a classifieds app. A "buyer" messages, agrees to your price, and says they've sent an advance. Moments later you get a UPI notification and a message: "Please accept the request to receive the payment." The notification is actually a collect request — approving it and entering your PIN sends money out of your account, not in.

If you already approved a fraudulent request

• Stop all further contact with the sender immediately — do not approve any follow-up requests.
• Open your UPI app and check if the transaction can be disputed or reported directly from the transaction history.
• Call your bank's customer care line the same hour and ask them to flag the transaction — early reporting gives the best chance of reversal.
• Call the National Cybercrime Helpline on 1930 (available 24/7) and file a complaint at cybercrime.gov.in.

How to stay protected

The simplest rule: your UPI PIN is only ever needed to sendmoney, never to receive it. If an app asks for your PIN to "accept" a payment, refund, or cashback, that is the scam signal by itself — close the request and verify separately with the sender through a channel you trust. If in doubt, you can also check a suspicious phone number or UPI ID against DSN's Safety Check tool before responding.