UPI Scam Safety: Why You Never Enter PIN to RECEIVE Money
Learn the most common UPI trick and the one rule that stops it: PIN is only for paying.
The UPI PIN rule
You enter your UPI PIN only to send money – never to receive it. If someone says “enter your PIN to receive the refund/prize/payment”, it is a scam. Your PIN is like your ATM PIN; no bank or app staff needs it.
Common UPI scams
| Scam | How it works | Defence |
|---|---|---|
| Collect request | Scammer sends a “request money” that looks like a payment to you | Decline requests you do not recognise; read “Pay” vs “Receive” |
| QR code “to receive” | You scan a QR and enter PIN – money leaves your account | Scanning a QR is for paying; nobody needs your scan to pay you |
| OLX / marketplace buyer | “Army officer” buyer sends a QR or request to pay you an advance | Meet in person, never scan or enter PIN to receive |
| Fake customer care | Googled “helpline” number asks to install a screen-sharing app | Use help only inside the official app/website |
| Wrong transfer | “I sent ₹5,000 by mistake, return it” – often a fake SMS | Check your bank balance in the app; ask them to raise a dispute via their bank |
| Fake payment screenshot | Shopkeeper shown an edited “Payment successful” screen | Confirm with the soundbox or your own app/bank SMS |
Settings that limit damage
- Set a lower daily UPI limit in your bank or UPI app if you rarely make big payments.
- Keep a small-balance account linked to UPI for daily use; savings in another account.
- Use app lock / biometric lock on GPay, PhonePe, Paytm and your bank app.
- Turn on transaction SMS and email alerts; read them.
- Review active AutoPay / mandates in your UPI app and cancel unknown ones.
- UPI Lite for small payments keeps your main PIN use lower (limits apply).
General habits for any online payment: UPI and online payment safety tips.
If money is lost
- Call 1930 immediately and note the acknowledgement number.
- Raise a complaint in the UPI app (Help → transaction → Report/Raise dispute) and with your bank.
- File on cybercrime.gov.in with UTR/transaction ID, scammer UPI ID, phone number and screenshots.
- If unresolved in 30 days, escalate to the bank’s grievance officer and then the RBI Ombudsman (cms.rbi.org.in).
Under RBI rules, if an unauthorised electronic transaction happened without your fault and you report within 3 working days, your liability is zero; delays increase your liability. Sharing PIN/OTP yourself is treated as negligence.
UPI PIN का नियम
UPI PIN सिर्फ़ पैसा भेजने के लिए डाला जाता है – पाने के लिए कभी नहीं। अगर कोई कहे “refund/इनाम/payment पाने के लिए PIN डालिए”, तो यह scam है। आपका PIN ATM PIN जैसा है; किसी bank या app staff को इसकी ज़रूरत नहीं।
आम UPI scams
| Scam | कैसे होता है | बचाव |
|---|---|---|
| Collect request | Scammer “request money” भेजता है जो आपको payment जैसा दिखता है | अनजान requests decline करें; “Pay” और “Receive” पढ़ें |
| “पैसे पाने” के लिए QR | आप QR scan करके PIN डालते हैं – पैसा आपके account से चला जाता है | QR scan करना देने के लिए है; आपको पैसे देने के लिए किसी को आपका scan नहीं चाहिए |
| OLX / marketplace ख़रीदार | “Army officer” ख़रीदार advance देने के लिए QR या request भेजता है | आमने-सामने मिलें, पैसे पाने के लिए कभी scan या PIN न डालें |
| नकली customer care | Google से मिला “helpline” number screen-sharing app install करवाता है | मदद सिर्फ़ official app/website के अंदर से लें |
| ग़लत transfer | “ग़लती से ₹5,000 भेज दिए, लौटा दो” – अक्सर नकली SMS | App में bank balance जाँचें; उन्हें अपने bank से dispute करने को कहें |
| नकली payment screenshot | दुकानदार को edited “Payment successful” screen दिखाई जाती है | Soundbox या अपने app/bank SMS से पुष्टि करें |
नुकसान सीमित करने वाली settings
- बड़े payments कम करते हैं तो bank या UPI app में रोज़ की UPI limit कम रखें।
- रोज़ के लिए UPI से छोटे balance वाला account जोड़ें; बचत दूसरे account में।
- GPay, PhonePe, Paytm और bank app पर app lock / biometric lock लगाएँ।
- Transaction SMS और email alerts चालू रखें; उन्हें पढ़ें।
- UPI app में चालू AutoPay / mandates देखें और अनजान रद्द करें।
- छोटे payments के लिए UPI Lite मुख्य PIN का उपयोग कम रखता है (limits लागू)।
किसी भी online payment की सामान्य आदतें: UPI और online payment safety tips।
अगर पैसा चला गया
- तुरंत 1930 पर call करें और acknowledgement number लिखें।
- UPI app में (Help → transaction → Report/Raise dispute) और अपने bank से शिकायत करें।
- UTR/transaction ID, scammer UPI ID, phone number और screenshots के साथ cybercrime.gov.in पर दर्ज करें।
- 30 दिन में हल न हो तो bank के grievance officer और फिर RBI Ombudsman (cms.rbi.org.in) के पास जाएँ।
RBI नियमों के तहत, अगर अनधिकृत electronic transaction आपकी ग़लती के बिना हुआ और आप 3 working days में report करते हैं, तो आपकी ज़िम्मेदारी शून्य है; देरी से ज़िम्मेदारी बढ़ती है। PIN/OTP ख़ुद बताना लापरवाही माना जाता है।
Frequently Asked Questions
Do I need to enter my UPI PIN to receive money?
No. Receiving money never needs a PIN or a QR scan from your side. Anyone asking for it is a scammer.
What is a UPI collect request scam?
The scammer sends a payment request that looks like you will receive money; approving it with your PIN sends your money to them.
Where do I report UPI fraud?
Call 1930, report on cybercrime.gov.in, and raise a dispute in your UPI app and bank.
