Fraud at the Speed of UPI: How AI Is Supercharging India’s Cybercrime Boom — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated Apr 30, 2026

Severity: HIGH | View Full Scam Details

Fraud at the Speed of UPI in 2026: How AI Is Supercharging India’s Cybercrime Boom

UPI fraud is rapidly evolving in India, with AI-powered scams making it harder than ever to protect your money.

What Is the Fraud at the Speed of UPI: How AI Is Supercharging India’s Cybercrime Boom?

In 2026, India is witnessing a new wave of UPI (Unified Payments Interface) fraud, turbocharged by the use of artificial intelligence (AI). Cybercriminals are no longer just sending generic phishing messages or spoofed payment requests — they are deploying AI tools to create hyper-realistic scam messages, automated voice calls, and even deepfake videos to trick victims into transferring money instantly. This scam targets everyday internet users and small business owners who rely heavily on UPI for instant digital payments.

The scam exploits the trust Indians place in UPI and the speed at which transactions happen—often within seconds. According to the Indian Cyber Crime Coordination Centre (I4C) and CERT-In advisories, the rise of AI-enabled social engineering attacks has increased the sophistication of UPI fraud, leading to a sharp rise in reported cases in metro cities and tier-2 towns alike. Recent RBI cautions have highlighted that fraudsters use AI to analyse victim behavior patterns and craft personalized messages that appear genuine, making victims more likely to respond.

How This Scam Works — Step by Step

1. Initial Contact: You receive a WhatsApp message, SMS, or an automated voice call from a number seemingly linked to your bank, UPI app, or a trusted service. The message uses names, transaction history snippets, or personal details scraped online using AI.

2. Fake Alert or Urgent Request: The scammer claims there has been a suspicious transaction on your UPI account or your bank account is under risk of being locked due to Aadhaar or KYC issues. Sometimes, AI-generated deepfake videos of supposed bank officials or customer support agents add pressure.

3. Call to Action: You are urged to verify your identity immediately via a link or by sharing a One-Time Password (OTP), UPI PIN, or by “approving” an urgent payment request to stop further loss. The AI chatbot behind the scenes answers your questions and sounds very convincing.

4. Sim Swap or Account Takeover: If you share OTPs or PINs, fraudsters quickly complete a SIM swap or initiate UPI authorization, transferring money from your bank account to their wallets.

5. Disappearance: The scammer blocks you and deletes all messages, leaving the victim helpless as money vanishes in moments.

Real Warning Signs to Watch For

• Unsolicited messages or calls asking for your UPI PIN or OTP. Remember, no bank or UPI app asks for PIN/OTP over calls or messages.
• Links that redirect you to unknown websites mimicking banks or UPI apps. Always verify URLs carefully.
• High-pressure tactics asking for immediate payment or "account verification."
• Messages containing personal details eerily accurate—this could be AI scraping your digital footprint.
• Deepfake voice calls or videos pretending to be bank officials.
• Requests to install unknown apps or accept screen-sharing sessions.
• Notifications of "pending Aadhaar verification" linked to UPI transactions that weren’t initiated by you.

What Happens to Victims

Victims often lose significant sums of money directly debited via UPI, sometimes thousands or lakhs of INR, with little chance of fast recovery since UPI payments are instant and irrevocable. The emotional toll includes stress, embarrassment, and loss of trust in digital payments. Victims also face risks like Aadhaar misuse—where their biometric or personal data gets exploited to open fraudulent bank accounts or apply for loans. SIM swap attacks intensify the damage by allowing scammers to intercept bank OTPs and messages, locking victims out of their own accounts.

What RBI and CERT-In Say

The Reserve Bank of India (RBI) has issued multiple advisories warning consumers about phishing scams via UPI, emphasizing that banks never ask for PIN, OTP, or passwords over phone calls or SMS. RBI’s 24x7 helpline (1800-569-0414) supports victims during fraud incidents.

CERT-In (Indian Computer Emergency Response Team) urges users to maintain vigilance against AI-powered social engineering attacks and recommends using multi-factor authentication wherever possible. The Indian Cyber Crime Coordination Centre (I4C) runs the national cybercrime helpline 1930 to help victims report incidents and seek guidance immediately.

How to Protect Yourself

1. Never share your UPI PIN, OTP, Aadhaar details, or passwords over calls or messages, no matter how official the request sounds.
2. Verify all payment requests before approval, especially those claiming urgency or linking to unknown websites.
3. Enable app-level security, biometric locks, and multi-factor authentication on your UPI and banking apps.
4. Avoid clicking on suspicious links sent over SMS, WhatsApp, or email. Always open UPI apps directly from your phone’s app, not via links.
5. Regularly check your bank and UPI transaction history for unauthorized activity.
6. Register your mobile number with your bank and Aadhaar to prevent SIM swap attacks, and report immediately if you lose mobile connectivity.
7. Keep your smartphone’s OS and apps up to date to guard against malware that can capture sensitive data.

What to Do If You’ve Been Targeted

1. Immediately block UPI transactions via your bank’s app or website.
2. Contact your bank’s fraud helpline to freeze your account or card.
3. Report the incident to the 1930 Cybercrime Helpline and cybercrime.gov.in to register an official complaint.
4. Inform your mobile service provider to prevent or reverse a SIM swap.
5. Change all your online banking and UPI app passwords and PINs promptly.
6. Inform RBI helpline (1800-569-0414) for urgent assistance regarding financial loss.
7. Monitor all linked accounts and Aadhaar activity through official portals for any suspicious behaviour.

Frequently Asked Questions

Q: Can AI-generated calls and messages be stopped?
A: Complete prevention is challenging, but staying alert to unsolicited messages, verifying sources, and using official app channels minimizes risk. Authorities are working on detection tools as AI fraud evolves.

Q: If I share my OTP by mistake, is my money lost?
A: Often, yes. OTPs approve transactions instantly on UPI. Immediately contact your bank and report the fraud. Quick action can sometimes limit losses.

Q: How can I verify if a UPI payment request is legitimate?
A: Always cross-check with the person or merchant directly through trusted means before approving any unexpected payment requests, especially urgent ones.

Stay safe from AI-powered UPI scams by verifying every suspicious message or call at BharatSecure.app before taking any action. Protect your money, and help spread awareness to keep India’s digital payments safe!