Delhi High Court Addresses Rising UPI Frauds — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 28, 2026

Severity: HIGH | View Full Scam Details

Delhi High Court Highlights Rising UPI Fraud Threats in India 2026: What You Must Know

UPI frauds are on the rise across India in 2026, causing increasing financial losses and concern among internet users.

What Is the Delhi High Court Addresses Rising UPI Frauds?

The Delhi High Court recently highlighted a worrying surge in scams involving India's Unified Payments Interface (UPI), one of the country's most popular and convenient digital payment methods. According to public complaints and reported cases, fraudsters are exploiting weaknesses in user awareness and mobile security to steal money directly from victims’ bank accounts linked through UPI apps. This has triggered urgent calls for stronger safeguards.

UPI, backed by the National Payments Corporation of India (NPCI) and regulated by the Reserve Bank of India (RBI), enables instant money transfers via smartphones, using a simple Virtual Payment Address (VPA). Due to its vast user base—now exceeding hundreds of millions—scammers are increasingly targeting everyday users, especially those less familiar with digital security. The frauds reported seem widespread, with nearly every Indian state affected, making this a national-level threat.

Recognising the severity, Indian authorities like CERT-In (Computer Emergency Response Team India) and the I4C (Indian Cyber Crime Coordination Centre) have issued alerts urging vigilance around suspicious messages and calls linked to UPI transactions. The Delhi High Court’s attention signals the judiciary’s recognition of the urgent need to bolster protections and awareness.

How This Scam Works — Step by Step

1. Initial Contact – Fake UPI or Bank Alert: Victims receive a call, SMS, or WhatsApp message claiming to be from their bank, NPCI, or a UPI app. This message usually warns of a suspicious transaction or a problem with their UPI account and urges immediate action.

2. Impersonation by Fraudsters: Callers posing as bank officials or government representatives ask victims to share their UPI PIN, OTP (One-Time Password), or other sensitive details under the pretext of securing the account or stopping fraudulent transfers.

3. OTP and PIN Trick: The victim is asked to enter an OTP sent to their mobile or to share screen access via remote apps. At this stage, the fraudsters validate themselves as trustworthy by providing fake confirmation or supposed "transaction details."

4. Transaction Confirmation Without Victim’s Consent: Using the information gathered, the fraudster initiates multiple UPI transfers out of the victim’s linked bank account, often in quick succession to accounts controlled by them or encrypted in complex wallet transfers.

5. Victim Realises Loss Too Late: Due to the instant nature of UPI payments and lack of reversal options, victims only become aware once the money is gone. Attempts to recover funds are complicated and slow.

Real Warning Signs to Watch For

• Unexpected SMS or WhatsApp messages asking for your UPI PIN or OTP.
• Calls claiming urgent bank or NPCI action but refusing to give verifiable employee details.
• Pressure to share confidential data or download remote access apps.
• Alerts from UPI apps showing transactions you did not initiate.
• Requests to confirm bank details or Aadhaar number through phone calls.
• Messages with poor language, spelling errors, or unverified sender IDs.
• Demands for immediate action to "protect" your account without follow-up through official app notifications.

What Happens to Victims

The consequences of UPI fraud can be severe. Financially, victims may lose thousands to lakhs of rupees from their linked bank accounts with limited chances of immediate reversal since UPI payments are designed as instant, irrevocable transfers. Emotional distress is also high, compounded by the effort needed to report, track, and potentially recover funds through bank grievance cells or cybercrime police.

Victims may also face further risks such as SIM swap frauds, where the fraudster takes control of the victim’s mobile number to intercept OTPs or lock out legitimate access. Aadhaar misuse sometimes accompanies such crimes, particularly if linked details are disclosed unwittingly.

What RBI and CERT-In Say

The Reserve Bank of India has repeatedly cautioned users not to share UPI PINs, OTPs, or passwords with anyone. RBI advisory stresses that banks or NPCI representatives never ask for such details over the phone. CERT-In has issued alerts encouraging users to verify the authenticity of digital communications and promptly report suspicious contacts.

For assistance, Indian users can call the national cybercrime helpline at 1930, which handles digital fraud complaints. Additionally, RBI’s customer grievance portal and helpline numbers published on official bank websites remain key resources for affected individuals.

How to Protect Yourself

1. Never share your UPI PIN or OTP with anyone, even if the caller claims to be from the bank or NPCI.
2. Verify any alert by logging in directly to your official UPI app or bank website instead of clicking on message links.
3. Avoid responding to unsolicited calls or messages claiming urgent action on your UPI account.
4. Set up app and device-level locks (PIN, fingerprint) to limit unauthorized access.
5. Do not download unknown remote access tools or apps suggested during such calls.
6. Regularly check your bank and UPI transaction history for any unauthorized payments.
7. Report suspected fraud immediately to your bank and file a complaint at cybercrime.gov.in.

What to Do If You’ve Been Targeted

If you suspect you have fallen victim to this UPI fraud:

• Immediately block your UPI app or disable UPI transactions via your bank’s mobile app or branch.
• Change your mobile SIM card password (if SIM swap is suspected) by visiting your telecom operator’s local outlet.
• Report the fraud to your bank’s customer care and ask them to initiate a complaint.
• Lodge a police complaint either online or at the nearest cybercrime police station.
• File a complaint with the national cybercrime portal at cybercrime.gov.in for faster government intervention.
• Contact the 1930 cybercrime helpline for guidance on further steps and recovery efforts.

Frequently Asked Questions

What should I do if someone asks me for my UPI PIN or OTP over a call or message?
Never share your UPI PIN or OTP with anyone under any circumstances. Official banks or NPCI never request these details. Hang up the call and verify the alert directly via the official app or bank website.

Is it possible to reverse a fraudulent UPI transaction?
UPI payments are mostly instantaneous and irreversible. However, if you report quickly, your bank may try to track and freeze the recipient account or refer the matter to NPCI and police. Prompt reporting improves chances of recovery.

How can I verify if a message about my UPI account is genuine?
Check for misspellings, unverified sender numbers, and unexpected attachments or links. Always open your official UPI or bank app directly and listen for official announcements. Use BharatSecure.app to verify suspicious messages.

For any suspicious messages or suspected fraud, verify immediately at BharatSecure.app and report to the 1930 helpline.

Disclaimer: This article describes a pattern of fraud reported in public sources for public-safety awareness. It is not legal, financial, or medical advice. To request correction or removal of any content, write to hello@bharatsecure.app.