Fake UPI Collect Request Scam — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 28, 2026

Severity: CRITICAL | View Full Scam Details

Fake UPI Collect Request Scam India 2026: Beware of This Rising Digital Fraud

A growing number of Indian UPI users are losing money due to the Fake UPI Collect Request Scam, where fraudsters trick people into approving bogus payment requests that drain their bank accounts.

What Is the Fake UPI Collect Request Scam?

The Fake UPI Collect Request Scam is a cyber fraud targeting millions of Indians who use UPI apps such as Google Pay, PhonePe, Paytm, and BHIM for everyday payments. In this scam, fraudsters send fake collect requests that appear legitimate, often mimicking contacts you know or official sources. These requests prompt users to “accept” or approve a payment, but instead of receiving money, users unknowingly transfer funds to scammers.

This scam can impact anyone using mobile banking or UPI, from salaried employees to small business owners. As India’s UPI ecosystem has grown rapidly, so have the opportunities for scammers exploiting users’ trust and familiarity with digital payments. According to cases reported to police and billion-rupee losses flagged by CERT-In in recent years, this scam has become critically dangerous in 2026, especially with increasing social engineering tactics bundled with fake collect requests.

The Reserve Bank of India (RBI) and CERT-In (Indian Computer Emergency Response Team) have repeatedly issued advisories urging users to verify the legitimacy of payment requests before approving transactions. They highlight that banks and UPI apps will never forcibly ask customers to approve random collect requests.

How This Scam Works — Step by Step

1. Initial Contact: The victim receives a call, WhatsApp message, or SMS from someone claiming to be a bank official, customer support agent, or even an acquaintance. The caller creates urgency, saying a refund or pending payment must be processed via UPI.

2. Fake Collect Request: Shortly after, the victim’s UPI app shows a “collect” money request — appearing with a familiar name or company logo, sometimes even mimicking the victim’s contact list.

3. Social Engineering Pressure: The caller advises the victim to approve the payment immediately, insisting it’s a refund or to settle a due amount. The victim is told it’s safe and reversible.

4. Approval and Fund Transfer: When the victim clicks “Accept” or “Approve” on the collect request, funds start moving out of their bank account. Often, scammers keep amounts small (like ₹500 or ₹1000) to avoid triggering immediate suspicion or bank alerts.

5. Multiple Small Requests: Sometimes, the scammer sends multiple small collect requests, cumulatively draining significant money over time.

6. No Refund or Recovery: Since these are legitimate transfers approved by the user, banks classify them as authorized transactions and rarely reverse the payments unless fraud is proven. Victims struggle to get money back.

Real Warning Signs to Watch For

• Unexpected UPI collect requests from unknown or rarely contacted numbers.
• Calls or messages pressuring immediate approval of payment requests.
• Requests described as refunds or settlements without prior communication.
• Collect requests with minor spelling errors or unusual sender names.
• Multiple small payment requests showing up within minutes.
• Callers asking for UPI PIN, OTP, or banking credentials (RBI prohibits sharing these).
• Requests coming from social or messaging apps combined with phone calls for "verification."

What Happens to Victims

Victims of this scam face immediate financial loss, often draining several thousand rupees stealthily. Because UPI transactions are designed to be instant and authorized by the user, getting refunds is difficult through normal bank grievance procedures.

Emotionally, victims experience stress, anxiety, and loss of trust in digital payments. Many hesitate to report due to fear of stigma or reprisals. Additionally, SIM swapping cases linked to this scam can exacerbate losses by giving fraudsters control over victims’ phone numbers, allowing access to OTPs and other secured apps.

The scam’s consequences sometimes ripple into misuse of Aadhaar-linked services if personal data is shared unknowingly during the call, adding identity theft risks on top of money loss.

What RBI and CERT-In Say

The Reserve Bank of India has warned users repeatedly about fake collect requests and phishing tactics. RBI insists that no bank or UPI app will ask customers to share PINs or approve unidentified collect requests under pressure.

CERT-In has urged victims to report cyber fraud promptly via its national helpline, 1930, and to visit cybercrime.gov.in for filing complaints. It recommends users verify suspicious messages independently before action.

The Indian government and I4C (Indian Cyber Crime Coordination Centre) work alongside banks and app providers to monitor such cybercrimes, educating the public on safe transaction practices.

How to Protect Yourself

1. Verify Collect Requests: Always confirm any unexpected collect request through a direct call or message to the sender from a known contact method.

2. Reject Unsolicited Requests: Never approve collect requests you didn’t initiate or weren’t informed about.

3. Ignore Pressure Calls: Don’t trust phone calls claiming to be bank officials demanding urgent approval of payments.

4. Never Share UPI PIN or OTP: RBI forbids sharing these details. Sharing makes your account vulnerable, regardless of caller claims.

5. Use App Notifications: Set alerts for every transaction in your UPI app and bank SMS to quickly spot unauthorized payments.

6. Limit UPI Transaction Limits: Use RBI features to keep daily transaction amounts low if concerned.

7. Report Suspicious Activity Immediately: Contact your bank’s fraud desk and the 1930 cybercrime helpline without delay.

What to Do If You've Been Targeted

• Immediately block or restrict UPI transactions via your bank app or customer service.
• Change your UPI PIN and other linked authentication credentials.
• File a complaint through cybercrime.gov.in, describing the incident in detail.
• Report to the 1930 cybercrime helpline for guidance and escalation.
• Notify your bank with evidence (screenshots and details) to investigate unauthorized transfers.
• Avoid engaging further with scammers or calls asking for more info.
• Consider informing local police and keep record of complaints filed.

Frequently Asked Questions

Q1: Can money be recovered if I approve a fake UPI collect request?
Recovering money can be difficult because the payment was authorized by the user. However, victims should immediately report to their bank and file a cybercrime complaint to explore recovery options.

Q2: How do scammers send fake UPI collect requests that look legitimate?
Fraudsters exploit loopholes in contact naming and use social engineering to mimic known contacts or company logos. They may combine WhatsApp messages or calls to convince victims the request is genuine.

Q3: What precautions does RBI recommend to avoid such scams?
RBI advises users never to share UPI PIN or OTP, to reject unsolicited payment requests, and to verify all collect requests directly with the sender before approving.

Check any suspicious UPI collect request or message with BharatSecure.app for verification, and report fraud quickly by calling 1930 to protect your money and data.

Disclaimer: This article describes a pattern of fraud reported in public sources for public-safety awareness. It is not legal, financial, or medical advice. To request correction or removal of any content, write to hello@bharatsecure.app.