UPI fraud in India: how scammers drain accounts in 2026
The seven most common UPI scams hitting Indian users this year, how they work, and how to stop them cold.
Why UPI is a scammer's favourite rail
UPI processed over 16 billion transactions in a single month last year. That volume is a gift to fraudsters — every lapse in attention is a door.
The seven most common playbooks
- "Wrong number" money requests — a "Collect Request" that looks like an incoming payment but is actually a debit.
- Fake customer-support numbers on Google that impersonate banks and walk you through "refund" flows that steal OTPs.
- QR-code scams at railway stations and roadside stalls — scanning to receive money never requires a PIN.
- Screen-sharing apps (AnyDesk, TeamViewer) installed under the guise of "KYC help".
- Deepfake voice calls from "family members" asking for emergency UPI transfers.
- Dating-app romance scams that slowly escalate from chat to "just send me ₹500 for the cab".
- Job-offer scams demanding a refundable "registration fee" over UPI.
What actually works to stop it
- Never enter your UPI PIN to receive money. This is the single rule that defeats most of the above.
- Lock your UPI app with a biometric, not just a 4-digit code.
- Report fraud within 24 hours to 1930 (the national cyber-crime helpline) and on cybercrime.gov.in. Banks are much more likely to reverse a transaction flagged inside that window.
- Turn on SMS alerts for every debit, however small.
- Keep a low daily UPI limit on your primary bank. ₹25,000 is plenty for day-to-day use.
If you've already been hit
File the 1930 complaint first, then visit your branch with the acknowledgement number. RBI's Positive Pay and zero-liability frameworks give you real leverage — but only if the paper trail is started fast.
