Delhi HC seeks response from Centre, RBI, NPCI on PIL seeking comprehensive framework to curb UPI frauds — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated Apr 30, 2026

Severity: MEDIUM | View Full Scam Details

UPI Fraud Scams in India 2026: Delhi HC’s PIL Pushes for Stronger Protection Framework

UPI fraud continues to threaten millions of Indian users, prompting the Delhi High Court to demand urgent responses from the Centre, RBI, and NPCI on a public interest litigation (PIL) seeking a solid plan to stop these scams.

What Is the Delhi HC Seeks Response from Centre, RBI, NPCI on PIL Seeking Comprehensive Framework to Curb UPI Frauds?

The Delhi High Court has recently called on the Government of India, the Reserve Bank of India (RBI), and the National Payments Corporation of India (NPCI) to respond to a Public Interest Litigation (PIL) aimed at tackling the growing menace of UPI frauds. Unified Payments Interface (UPI) has revolutionized digital payments in India, with transactions worth lakhs of crores being processed daily. However, with widespread adoption comes increased risks. Scammers are making use of UPI’s convenience by tricking users into unauthorized payments.

These frauds target everyday Indian users—especially those who receive unsolicited messages on WhatsApp, SMS, or phone calls—posing as bank officials, NPCI employees, or tech support agents. The scam exploits India’s massive smartphone penetration and the ease of sharing UPI handles or QR codes, which scammers manipulate to siphon off money.

The PIL highlights that despite RBI and NPCI’s advisories, enforcement and consumer education are lagging behind the rapid evolution of these scams. The court’s intervention aims to create a more comprehensive regulatory and technological framework to better protect users and ensure faster grievance redressal.

How This Scam Works — Step by Step

1. Initial Contact via WhatsApp or Phone Call
   The scammer often initiates contact through WhatsApp messages or a call, pretending to be from the victim’s bank, NPCI, or a government agency. They might say, "We need to verify your UPI account due to suspicious activity" or "Your UPI PIN needs to be reset immediately."

2. Establishing False Trust
   They use fake caller IDs, forged official documents, or even voice modulation to sound authentic, making the victim believe this is a legitimate call or message.

3. Request for Sensitive Information
   The fraudster asks the victim to share sensitive details such as UPI PIN, OTP (One-Time Password), or to click on a link to “verify” or “update” their UPI details.

4. Unauthorized Transaction Initiation
   Using the stolen data, the scammer logs into the victim’s UPI app on a compromised device or remotely initiates payments to their own accounts.

5. Disappearance and Delayed Reporting
   Once the money is transferred, the scammer cuts off communication. Victims only realize when their bank alerts or balance shows unexpected deductions.

This method preys on psychological tricks such as urgency (“You must act now”) or fear (“Your account will be frozen”) to rush victims into compliance.

Real Warning Signs to Watch For

• Unexpected messages or calls asking for UPI PIN, OTP, or passwords
• Claims of account suspension or urgent verification without official confirmation
• Links to websites that look like bank portals but have typos or odd URLs
• Pressure tactics urging immediate action or threats of blocking the account
• Requests to download apps or provide remote access to your phone
• Contacts pretending to be bank employees but calling from personal phone numbers
• Receiving transaction SMS alerts for payments you did not authorize

What Happens to Victims

Victims often suffer financial loss with their bank accounts drained out quickly. Although some banks can reverse unauthorized UPI payments, it can take weeks, and many times the money is transferred to untraceable wallets or accounts outside India. Emotional distress includes feelings of violation, fear of identity theft, and loss of trust in digital payments.

Because many scams also involve SIM swap attacks, scammers can gain access to other sensitive services linked with Aadhaar, such as government welfare benefits or insurance claims. This magnifies the personal and financial damage to the victim beyond just lost money.

What RBI and CERT-In Say

RBI, India’s banking regulator, has issued repeated advisories reminding users never to share UPI PINs or OTPs with anyone. It also emphasizes using only trusted apps and verifying sender details. RBI’s customer grievance portal and helpline are operational for victims.

CERT-In (Indian Computer Emergency Response Team) advises users to be cautious of unsolicited digital payment requests and suspicious links. It recommends reporting cybercrime incidents to the national helpline 1930 and filing complaints on cybercrime.gov.in.

NPCI, which runs the UPI platform, continuously updates security features and urges users to only transact through official UPI apps and avoid third-party “scan and pay” links from unknown sources.

How to Protect Yourself

1. Never Share UPI PIN or OTP with Anyone — No bank or NPCI official will ask for this.
2. Only Use Official UPI Apps like BHIM, Google Pay, PhonePe, or your bank’s app.
3. Verify Caller Identity by calling your bank’s official number before responding to any suspicious message.
4. Avoid Clicking Unknown Links sent over WhatsApp or SMS related to payment verification.
5. Enable Device Security Measures such as lock screen passwords and app permissions.
6. Regularly Monitor Bank Statements for any unauthorized transactions.
7. Report Suspicious Activity Immediately to your bank and cybercrime helpline 1930.

What to Do If You’ve Been Targeted

• Immediately Block UPI Transactions via your banking app or call customer care.
• File a Complaint with Your Bank demanding reversal of unauthorized payments.
• Report the Incident on cybercrime.gov.in, India’s official cybercrime portal.
• Call the 1930 Cybercrime Helpline for expert guidance.
• Inform Your Mobile Service Provider if you suspect SIM swap fraud.
• Change Your UPI PIN and Passwords for related accounts as a precaution.
• Collect and save all communication evidence for authorities.

Frequently Asked Questions

Q: Can banks reverse UPI transactions after a fraud?
A: Banks can initiate reversal requests, but success depends on how quickly you report and whether the scammer’s account is active. Speedy reporting increases chances of recovery.

Q: How can I verify if a UPI transaction alert is genuine?
A: Check your bank’s official app or statement directly. Don’t trust SMS or WhatsApp messages alone as scammers spoof numbers and messages.

Q: Is it safe to share my UPI QR code or handle?
A: Sharing QR codes or UPI IDs publicly is generally safe, but avoid sharing in response to unsolicited requests. Always confirm the recipient’s identity before transacting.

UPI frauds are evolving fast, but awareness and vigilance are your best defense. If you get any suspicious message or call related to your UPI transactions, do not respond immediately. Verify first. Stay safe and always check suspicious digital payment messages at BharatSecure.app — India’s trusted platform to fight scams.