Delhi HC seeks response from Centre, RBI, NPCI on PIL seeking comprehensive framework to curb UPI frauds — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 01, 2026

Severity: MEDIUM | View Full Scam Details

UPI Fraud Alert 2024: Delhi Court Addresses Surge in Digital Payment Scams Across India

UPI (Unified Payments Interface) fraud is on the rise in India, and a recent Public Interest Litigation (PIL) in the Delhi High Court highlighting this issue demands stronger action from the Centre, RBI, and NPCI (National Payments Corporation of India) to establish a comprehensive framework to curb these digital payment scams.

What Is the Delhi HC seeks response from Centre, RBI, NPCI on PIL seeking comprehensive framework to curb UPI frauds?

The PIL before the Delhi High Court points to a worrying trend: the increasing vulnerability of UPI users to sophisticated fraud schemes. As digital transactions become the norm in India, particularly through platforms like Google Pay, PhonePe, and Paytm, the opportunities for scammers also proliferate. The PIL essentially asks the government and regulatory bodies to take concrete steps to protect Indian consumers from falling victim to these digital traps. This includes strengthening security protocols, improving fraud detection mechanisms, and enhancing awareness campaigns to educate the public. The concern isn't just about the immediate financial loss to individuals; it's about eroding trust in the digital payment ecosystem that India is working so hard to build. The rise in brazen UPI scams erodes public confidence and, if unchecked, could negatively impact the adoption of digital payment methods promoted heavily by the government.

The PIL comes at a time when CERT-In (the Indian Computer Emergency Response Team) and the RBI have already issued advisories about the increasing incidents of online fraud, including those involving UPI. These advisories highlight the need for vigilance and caution users against sharing sensitive information or falling prey to tempting offers and schemes. The Ministry of Home Affairs' I4C (Indian Cybercrime Coordination Centre) is also working to combat cybercrime, including UPI fraud, but a unified and comprehensive framework, as sought by the PIL, is seen as essential for effectively addressing the evolving threat landscape.

How This Scam Works — Step by Step

These fraudsters are remarkably skilled at deception, often successfully separating victims from their hard-earned money via digital trickery. Here's how a typical UPI scam unfolds:

1. Initial Contact via Social Media: The scam begins with a message, often on WhatsApp, from an unknown number. This message might feature an attractive offer, such as a substantial discount on your electricity bill, a lucrative work-from-home job, or a free gift. Scammers frequently use fake profiles and display pictures to appear legitimate.

2. Building Trust: Once you reply to the message, the scammer will try to build trust. They may ask basic questions about you, your family, or your interests. They often use flattering language and try to appear helpful and friendly. They might even share fake customer reviews or testimonials to further convince you of their legitimacy.

3. UPI Request Under the Guise of a Payment: The trick lies in disguising a "request money" transaction as a legitimate payment. The scammer will claim they need you to verify your UPI ID to receive the promised benefit. They will send you a UPI request for a small amount (e.g., INR 1 or INR 2) to "verify" your account.

4. Exploiting Urgency and Confusion: The scammer will create a sense of urgency, claiming the offer is only valid for a limited time. They might also confuse you with technical jargon or complicated instructions. Their goal is to pressure you into approving the UPI request without carefully checking the details.

5. Theft: If you approve the UPI request, you are essentially sending money to the scammer instead of receiving it. The amount might seem small initially, but this is a test. Once they know your UPI PIN works, they may try to initiate larger transactions. In some cases, they gain access to your UPI account and siphon out all available funds.

Real Warning Signs to Watch For

• Unsolicited messages with unbelievable offers: Be wary of any message promising discounts, jobs, or gifts that seem too good to be true, especially from unknown numbers.
• Requests to "verify" your UPI ID by sending money: No legitimate business or service provider will ever ask you to send money to verify your UPI account.
• Pressure to act quickly: Scammers often create a sense of urgency to prevent you from thinking clearly or seeking advice.
• Poor grammar and spelling: Scam messages often contain grammatical errors or typos, which can be a sign of fraud.
• Requests for sensitive information: Never share your UPI PIN, OTP (One-Time Password), Aadhaar number, or bank account details with anyone over the phone or online.
• Mismatch between the sender's name and the UPI ID: Carefully check the UPI ID of the person requesting money to ensure it matches their claimed identity.
• Links to unfamiliar websites: Be extremely cautious of clicking on links sent by unknown contacts, as they may lead to phishing sites designed to steal your credentials.

What Happens to Victims

The impact of these UPI scams can be devastating. Victims not only suffer financial losses, which can range from small amounts to significant life savings, but also experience emotional distress, shame, and a loss of trust in others. The consequences extend beyond the immediate financial loss. For example, if a scammer gains access to your Aadhaar details through a phishing link, they could potentially misuse this information for identity theft or other fraudulent activities. Similarly, a compromised SIM card could allow scammers to intercept OTPs and gain access to other online accounts linked to your phone number. Victims often face a lengthy and frustrating process to recover their funds and restore their financial security. Even if a UPI transaction is reversed through official channels, the anxiety and mental distress associated with the experience can take a long time to overcome.

What RBI and CERT-In Say

The Reserve Bank of India (RBI) has consistently cautioned users against sharing sensitive financial information online or over the phone. They emphasize the importance of creating strong passwords, being vigilant about phishing attempts, and reporting suspicious activity to the relevant authorities. CERT-In also issues regular advisories on various cyber threats, including UPI fraud, providing guidance on how to protect yourself and your devices. Remember that the RBI never asks for your account details or PIN. The I4C operates a national cybercrime reporting portal (cybercrime.gov.in) and the 1930 helpline to assist victims of cyber fraud.

How to Protect Yourself

1. Never share your UPI PIN or OTP: Your UPI PIN is like your ATM PIN; keep it secret and never share it with anyone. Similarly, treat OTPs as confidential and never disclose them to anyone over the phone or online.
2. Enable UPI transaction limits: Most UPI apps allow you to set daily transaction limits. This can help minimize your losses if your account is compromised.
3. Be cautious of unsolicited offers: If an offer sounds too good to be true, it probably is. Don't fall for pressure tactics or promises of quick riches.
4. Verify UPI IDs carefully: Always double-check the UPI ID before approving any transaction. Make sure the name and details match the person or business you intend to pay.
5. Use strong passwords and update them regularly: Protect your email, social media, and UPI accounts with strong, unique passwords. Change your passwords regularly, and avoid using the same password for multiple accounts.
6. Install and update antivirus software: Protect your devices from malware and viruses by installing and regularly updating antivirus software.
7. Be aware of your surroundings when using UPI: Avoid making UPI transactions in public places where someone might be able to see your PIN or OTP.

What to Do If You've Been Targeted

1. Immediately report the incident to your bank: Contact your bank and report the fraudulent transaction as soon as possible. They can block your account and prevent further unauthorized transactions.
2. File a complaint on the National Cyber Crime Reporting Portal: Register a complaint on cybercrime.gov.in.
3. Call the cybercrime helpline 1930: This helpline is available 24/7 to assist victims of cyber fraud.
4. Inform your local police station: File a written complaint at your nearest police station and provide them with all the details of the incident.
5. Change your UPI PIN and passwords: As a precautionary measure, change your UPI PIN, email password, and other online account passwords immediately.
6. Contact NPCI: Contact NPCI through their website or customer support channels to report the fraudulent UPI transaction. They can investigate the matter and take appropriate action against the scammer's UPI ID.

Frequently Asked Questions

Q: Can I get my money back if I've been scammed through UPI?

A: While there's no guarantee of complete recovery, reporting the incident immediately to your bank and the cybercrime authorities increases your chances. Banks often investigate fraudulent transactions and may be able to reverse the payment if reported promptly.

Q: How can I verify if a UPI ID is legitimate?

A: Before making any payment, double-check the UPI ID with the recipient. Ask them to confirm their name and other details. Be wary of UPI IDs that seem unfamiliar or inconsistent with the claimed identity.

Q: Are UPI apps safe to use?

A: UPI apps are generally safe if you take necessary precautions. Always download apps from official app stores (Google Play Store or Apple App Store). Ensure your app is updated to the latest version.