Fraudulent UPI Payment Request Scam — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 27, 2026

Severity: CRITICAL | View Full Scam Details

Beware in 2026: Fraudulent UPI Payment Request Scam Surging Across India

Millions of Indians face a serious threat as fraudsters use fake UPI payment requests to steal money through trusted apps like Google Pay, PhonePe, and Paytm.

What Is the Fraudulent UPI Payment Request Scam?

The Fraudulent UPI Payment Request Scam is a dangerous cybercrime that targets everyday users of Unified Payments Interface (UPI) apps in India. These apps have become part of daily life, enabling instant money transfers with just a few taps. Unfortunately, scammers exploit this convenience by sending fake payment requests that appear to come from someone you know or a trusted business. This scam aims to trick users into approving payments falsely requested through UPI.

The typical victims are Indian internet users who stay connected via WhatsApp or SMS, where most scam messages are received. Although anyone using UPI is at risk, older adults and less tech-savvy users are particularly vulnerable. The scam’s reach is extensive; the Indian government’s Indian Cyber Crime Coordination Centre (I4C) and CERT-In have recorded a notable uptick in fraud cases linked to these kinds of fraudulent payment requests as UPI transactions hit new highs in 2026.

RBI and CERT-In have issued warnings to users about verifying payment requests and being cautious of urgent messages demanding money. They emphasize never approving UPI requests without double-checking the sender, especially if the request arrives unexpectedly.

How This Scam Works — Step by Step

1. Scammer Creates a Fake or Altered Contact: The fraudster either duplicates the victim’s contact or changes a saved name slightly (e.g., “Anuj Sharma” becomes “A9uj Sharma”) to appear familiar.

2. Initiating Communication via WhatsApp or SMS: They send a message pretending to be the contact, often claiming an emergency or urgent need, like “Please repay the ₹500 you owe me” or “Need to pay the vegetable vendor quickly, please help”.

3. Sending a UPI Payment Request: Alongside the message, the scammer shares a UPI payment request link, or a QR code that looks legitimate—a common trick designed to bypass suspicion.

4. Creating a Sense of Urgency: They pressure the victim by saying the request is time-sensitive, making it hard for the receiver to think twice.

5. Victim Approves the Payment: Believing it’s a genuine request from a trusted person or merchant, the victim clicks the link or scans the QR code and approves the payment.

6. Money Gets Transferred to the Scammer: Once approved, the payment moves instantly, typically to the scammer’s account, and reversing this is extremely difficult.

7. The Victim Realizes Too Late: After the scammer disappears or deletes the chat, the victim understands the loss but by then, funds are already gone.

Real Warning Signs to Watch For

• The payment request is unexpected or out of context with the person’s usual behavior.
• The sender’s contact name looks slightly altered or has spelling mistakes.
• The request comes with urgent or alarmist language pushing you to pay immediately.
• The message includes a QR code or payment link instead of asking for a manual transfer.
• The amount requested is oddly specific or higher than usual.
• The message is sent via WhatsApp or SMS, even if you usually interact with the contact in person.
• There’s pressure to keep the payment confidential or not talk to others about it.

What Happens to Victims

Victims of this scam often face serious financial loss, as UPI payments generally cannot be reversed once approved. Unlike traditional bank transfers, there is no “chargeback” for UPI payments. While banks and payment apps may assist in investigations, recovering money is rare.

Aside from losing money, victims experience emotional distress, including betrayal and anxiety over compromised trust. Some may fear their Aadhaar or bank details got exposed, especially if the scam led to follow-up harassment or SIM swap fraud.

In India, SIM swap scams that happen alongside such payment frauds can allow criminals to access OTPs and other verification methods, worsening losses. Thus, the ripple effect can include identity theft and long-term financial damage.

What RBI and CERT-In Say

The Reserve Bank of India (RBI) has repeatedly cautioned users to remain vigilant about UPI scams, urging users to never approve payment requests without verifying the sender’s identity. RBI’s helpdesk (1800-22-1911) and the 1930 cybercrime helpline provide assistance for reporting frauds.

CERT-In, India’s nodal cybersecurity agency, has issued advisories emphasizing safe digital practices and reporting suspicious payment requests immediately. The Indian Cyber Crime Coordination Centre (I4C) also encourages filing complaints on the cybercrime.gov.in portal to enable coordinated action against such fraud.

RBI’s framework requires payment apps to implement stronger security measures, but the onus remains on users to avoid falling prey to social engineering tactics common in these scams.

How to Protect Yourself

1. Verify Every UPI Payment Request: Call or message the person (on a different channel) sending the request before approving any payment.

2. Check Contact Details Carefully: Be alert to slight misspellings or unusual numbers, even if the name looks familiar.

3. Never Approve Payment Requests From Unknown Contacts: Only pay someone you trust and can confirm personally.

4. Ignore Urgent Pressure Messages: Scammers use urgency to push mistakes. Always take time to verify.

5. Avoid Clicking Payment Links or QR Codes Without Confirmation: Scan QR codes at physical locations yourself instead of relying on forwarded images.

6. Use UPI Apps With In-App Security Settings: Enable two-factor authentication and payment PINs.

7. Report Suspicious Messages Immediately: Forward them to BharatSecure.app or call the 1930 cybercrime helpline.

What to Do If You’ve Been Targeted

1. Block the Scammer’s Contact Immediately to stop further communication.

2. Report the Incident to Your Bank and UPI App Support to flag fraudulent transactions.

3. File a Complaint on cybercrime.gov.in with full details including screenshots and messages.

4. Call the 1930 Cybercrime Helpline for guidance on next legal steps.

5. Change Your UPI PIN and App Passwords to prevent further misuse.

6. Inform Your Mobile Operator About Any Suspicious SIM Activity to guard against SIM swap fraud.

7. Keep All Evidence Organized for potential police investigations.

Frequently Asked Questions

Q: Can I get my money back if I paid a fraudulent UPI request?
A: Unfortunately, UPI payments are instant and generally non-reversible. Banks will investigate, but most victims do not recover the lost money.

Q: How can I verify if a UPI payment request is genuine?
A: Always contact the sender through a different communication channel—like a phone call or in-person confirmation—before paying.

Q: What should I do if I receive an unsolicited UPI payment request?
A: Do not approve it. Block the sender, report it to your UPI app support, and notify cybercrime authorities through the 1930 helpline or cybercrime.gov.in.

UPI scams like these are becoming more sophisticated, but vigilance and verification are your best defense. Before you hit pay, always double-check suspicious payment requests. Stay safe and verify any suspicious message instantly at BharatSecure.app — your trusted partner against digital fraud in India.