A simple phone call, a moment of panic—and your money is gone. India is seeing a massive surge in digital payment scams. ⚠️📲 Now, the RBI is stepping in with big changes that could completely reshape how you send money. — How to Identify & Stay Safe

Severity: MEDIUM | View Full Scam Details

Beware in 2026: How a Simple Phone Call Can Drain Your UPI Account in India’s Rising Digital Payment Scams

A single phone call, combined with panic and pressure, is causing thousands of Indians to lose money daily through UPI and digital payment fraud.

What Is the Phone Call Panic Scam That’s Emptying Digital Wallets Across India?

In 2026, India continues to face a surge in digital payment scams, particularly one where fraudsters use simple phone calls to trigger panic and steal money from victims’ bank accounts. This scam exploits India’s growing dependence on platforms like UPI, WhatsApp, and mobile banking apps. Anyone with a bank account and a smartphone is a potential target, but scammers often focus on older citizens, non-tech-savvy individuals, and those who are generally trusting of phone calls from unknown numbers.

The Reserve Bank of India (RBI), CERT-In, and the Indian Cyber Crime Coordination Centre (I4C) have all issued warnings about such scams, describing how fraudsters impersonate bank officials, government employees, or law enforcement officers. They create fake urgencies like “your Aadhaar is compromised,” “illegal transactions detected,” or “your UPI is being hacked.” These tactics build panic, prompting victims to share confidential data or approve UPI transactions unknowingly.

While exact statistics are hard to track, industry reports reveal that losses related to digital payment frauds, including UPI scams, crossed several hundreds of crores in 2025. With over 10 billion UPI transactions monthly, even a tiny fraction falling prey causes significant damage to users and the financial ecosystem.

How This Scam Works — Step by Step

1. The Initial Call or WhatsApp Message:
   The victim receives a call or WhatsApp message from a number claiming to be a bank official, government agency, or police officer. The caller often shows some details like the victim’s name or bank name (obtained from open sources or data leaks).

2. Creating Urgency and Fear:
   The scammer claims there is a security breach, such as ‘your Aadhaar-linked account is compromised’ or ‘unauthorised UPI transactions detected.’ They insist immediate action must be taken, warning of account freezing or legal consequences.

3. Requesting Sensitive Information:
   To “resolve” the issue, the fraudster asks the victim to confirm OTPs (One-Time Passwords), share UPI PIN under false pretexts, or grant remote access via fake apps.

4. Initiating Fraudulent Transaction:
   Using the obtained credentials or real-time OTPs, the scammer quickly transfers money from the victim’s bank account via UPI apps like Google Pay, PhonePe, or BHIM.

5. Blocking Communication:
   Once the money is transferred, the scammer ends the call or blocks the victim on WhatsApp. Victims realize too late that funds have vanished.

Real Warning Signs to Watch For

• Unsolicited calls or WhatsApp messages about “security breaches” or “account freezing” from unknown numbers.
• Requests for OTP, UPI PIN, or bank passwords under any pretext.
• Urgency or threats urging you to take immediate action without time to think.
• Caller refuses to provide a verifiable employee ID or directs you to apps/websites to enter personal info.
• Scammer asks you to install unknown “security” or screen-sharing apps.
• Messages containing spelling mistakes or unusual grammar (often a sign of a fraudulent sender).
• Numbers that change frequently or calls from “masked” numbers that don’t show a specific caller ID.

What Happens to Victims

Victims often face severe financial losses as UPI transactions are instant and irreversible, making it nearly impossible to recover funds once transferred. Even though RBI has introduced limited reversal windows and grievance redressal processes, many victims report long delays and complex procedures.

Emotionally, victims of this scam suffer anxiety, loss of trust in digital payments, and fear of identity theft or Aadhaar misuse. In some cases, fraudsters combine SIM swap scams, taking over victims’ mobile numbers and locking them out of banking apps altogether, intensifying helplessness.

What RBI and CERT-In Say

The Reserve Bank of India has repeatedly warned users never to share OTPs, UPI PINs, or passwords over phone calls or messages. RBI’s cybersecurity guidelines emphasize vigilance and recommend users report suspicious calls immediately through their bank or the RBI helpline.

CERT-In advises users to keep their mobile operating systems updated, avoid clicking unknown links, and be cautious of unsolicited communications. The Indian Cyber Crime Coordination Centre (I4C) facilitates quick reporting of cybercrimes and urges victims to contact the National Cyber Crime Reporting Portal or the 1930 helpline.

How to Protect Yourself

1. Never share your OTP, UPI PIN, passwords, or Aadhaar details over phone or WhatsApp.
2. Reject calls from unknown or suspicious numbers claiming to be from banks or government. Verify by calling official helpline numbers yourself.
3. Do not install apps or click on links sent by strangers.
4. Maintain strong, unique passwords for banking apps and enable biometric locks where possible.
5. Regularly check your bank statements and UPI transactions for unauthorized activity.
6. Register your mobile number with the Do Not Disturb (DND) service to reduce spam calls.
7. Use RBI’s secure payment methods and updated official banking apps.

What to Do If You’ve Been Targeted

1. Immediately block your UPI payment app and change app passwords. Most apps have an ‘account lock’ or ‘block profile’ option.
2. Contact your bank’s customer care and RBI’s helpline to report fraudulent transactions.
3. File a complaint at the National Cyber Crime Reporting Portal at cybercrime.gov.in or call the 1930 cybercrime helpline for assistance.
4. Inform your mobile service provider if you suspect SIM swap or number compromise.
5. Keep a record of all communications and transaction details for police or bank investigations.

Frequently Asked Questions

Q: Can RBI reimburse me if I lose money in this scam?
A: RBI has frameworks for dispute resolution but reimbursement depends on factors like negligence and prompt reporting. Early complaint filing increases chances of recovery but there is no guaranteed refund.

Q: What should I do if someone asks me for my Aadhaar details over phone?
A: Never share Aadhaar number or OTP over phone calls. Government or bank officials will never ask for these details unsolicited.

Q: How can I verify if a call from my “bank” is genuine?
A: Hang up and call your bank’s official customer service number. Do not trust caller IDs alone as scammers can spoof numbers.

Stay alert in 2026! Before you react to any urgent call or message about your money or Aadhaar, always double-check and verify. When in doubt, visit BharatSecure.app to verify suspicious messages and calls — protecting your money starts with you.