Fake Shopping Discount Coupon Fraud — How to Identify & Stay Safe

Severity: HIGH | View Full Scam Details

Beware in 2026: Fake Shopping Discount Coupon Fraud on UPI and WhatsApp Targeting Indians

Millions of Indians are falling victim every year to fake shopping discount coupon scams that steal their money via UPI by exploiting WhatsApp and KYC loopholes.

What Is the Fake Shopping Discount Coupon Fraud?

This scam tricks Indian shoppers by offering irresistible discount coupons or vouchers for popular e-commerce platforms like Flipkart, Amazon, or Myntra. These “offers” are shared mainly through WhatsApp messages or SMS, especially during festive seasons such as Diwali or big sales like the Great Indian Festival. Scammers exploit the excitement around discounts to lure users into clicking suspicious links.

Once victims click, they are taken to fake websites that look almost identical to real shopping portals or Google Forms that ask for sensitive details like UPI PIN, Aadhaar number, or mobile number verification. The ultimate goal is to steal money directly from their bank accounts using UPI fraud or misuse their identity for further scams.

The scam is widespread across India, targeting mostly middle-class working professionals and young adults who frequently shop online. The Indian government’s CERT-In and I4C (Indian Cyber Crime Coordination Centre) have issued warnings about such frauds, highlighting their sharp rise especially during festive periods. The Reserve Bank of India (RBI) also cautions users against sharing sensitive UPI and banking credentials over unsolicited messages.

How This Scam Works — Step by Step

1. Initial Contact: You receive a WhatsApp message or SMS promising a huge discount or exclusive shopping coupons from trusted retail giants like Flipkart or Amazon. The message often sounds urgent, e.g., “Limited-time exclusive 70% discount—Redeem Now!”

2. Fake Link Click: The message includes a link that claims to let you claim the coupon, but it directs you to a fake website designed to mimic a real e-commerce platform or a Google Form.

3. Personal Information Request: On the fake site or form, you are asked to enter personal details, including your full name, phone number, Aadhaar, and most critically—your UPI ID and PIN or KYC details.

4. Payment Confirmation: Some sites may even ask you to authenticate a small transaction, which scammers use to verify your UPI credentials.

5. Money Transfer: With your UPI details and PIN compromised, scammers instantly transfer money from your bank account to theirs. Victims often notice the unauthorized transaction only after it’s too late.

6. Further Exploitation: Some fraudsters misuse collected Aadhaar or KYC details for identity theft, SIM swaps, or other cybercrimes, increasing the victim’s vulnerability.

Real Warning Signs to Watch For

• Messages claim huge discounts from known brands without official announcements.
• Links in WhatsApp/SMS lead to non-official URLs or Google Forms.
• Urgent calls to “act now” or “limited time offer” push you to skip verification.
• Requests for UPI PIN, Aadhaar number, or scanned copies of documents.
• Poor grammar, spelling mistakes, or unusually informal language in messages.
• Offers that require upfront payments or micro-transactions for verification.
• Unexpected messages from unknown numbers claiming to be customer support.

What Happens to Victims

Victims suffer direct financial losses through unauthorized UPI payments, often ranging from a few thousand to lakhs of rupees. Since UPI transactions are instant and irrevocable, reversing fraudulent payments is extremely difficult without quick reporting. Victims also face emotional trauma, losing trust in digital payments.

If Aadhaar or KYC data is compromised, scammers may conduct SIM swaps, locking victims out of their mobile and banking access. This gives fraudsters further control to perpetrate more scams, including fraudulent loans or credit card applications. The nightmare of recovery can stretch for months, affecting credit scores and daily financial life.

What RBI and CERT-In Say

The Reserve Bank of India (RBI) has issued several advisories reminding users never to share UPI PIN or banking credentials with anyone, even if the request looks official. The RBI helpline (1800-225-582) is available for reporting banking frauds.

CERT-In alerts emphasize vigilance during festive seasons when cybercrime rates spike. They warn against clicking suspicious links from WhatsApp or SMS and stress verifying offers directly on official websites.

India’s Indian Cyber Crime Coordination Centre (I4C) publicizes the 1930 cybercrime helpline that victims can call to report scams promptly. Timely reporting is critical for minimizing damage.

How to Protect Yourself

1. Always verify discount offers from official apps or websites before trusting WhatsApp or SMS messages.
2. Never share your UPI PIN, Aadhaar number, OTP, or other sensitive data via WhatsApp, SMS, or phone calls.
3. Reject urgent-sounding messages pressuring you to act quickly.
4. Check URLs carefully—genuine e-commerce URLs never use Google Forms for sensitive data collection.
5. Enable two-factor authentication (2FA) on your banking and shopping apps.
6. Regularly monitor your bank and UPI transaction history for unauthorized transfers.
7. Install a trusted security app and keep your phone’s software up to date.

What to Do If You've Been Targeted

1. Immediately block and report the sender on WhatsApp.
2. Contact your bank’s customer service to block your UPI ID or freeze your account to stop further fraudulent transactions.
3. Change your UPI PIN and passwords for related accounts.
4. File a complaint on the National Cyber Crime Reporting Portal (cybercrime.gov.in).
5. Call the 1930 cybercrime helpline for expert advice and assistance.
6. Inform your mobile service provider if you suspect SIM swapping.
7. Report to RBI’s banking fraud helpline (1800-225-582) for financial assistance and follow-up.

Frequently Asked Questions

Q: Can I get my money back if I paid through UPI using a fake coupon?
A: UPI transactions are instant and usually cannot be reversed once completed. However, if reported promptly to your bank and through cybercrime helplines, you may recover funds depending on the case’s specifics.

Q: How can scammers use my Aadhaar details collected through fake sites?
A: Aadhaar data can be misused for identity theft, SIM swaps, opening fraudulent bank accounts or loans, and bypassing KYC for further scams, worsening your financial and legal troubles.

Q: Are official e-commerce companies involved in these discount coupon scams?
A: No. Reputed companies like Flipkart and Amazon do not send discount coupons via unsolicited WhatsApp messages. Always check their official apps or websites for authentic offers.

If you receive suspicious messages or links promising unbelievable discounts, do not click or share any personal data. Verify all such offers for free at BharatSecure.app and protect yourself from India’s rising digital fraud threats. Stay safe!