From trusted persons to kill switch: 6 ways how RBI is planning to safeguard your online payments — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 26, 2026

Severity: MEDIUM | View Full Scam Details

From Trusted Persons to Kill Switch: 6 Ways How RBI Is Planning to Safeguard Your Online Payments in 2026

Online payment scams in India are evolving fast, and fraudsters are exploiting trust to steal your money — here’s how the RBI’s new measures aim to protect you.

What Is the From Trusted Persons to Kill Switch Scam?

With India’s booming digital economy, more Indians use UPI and mobile wallets daily to send and receive payments. Unfortunately, scammers have found clever ways to trick people by pretending to be trusted contacts or bank officials. The "From Trusted Persons to Kill Switch" scam involves fraudsters initially gaining your trust and later executing rapid transactions, leaving you helpless to stop the fraud.

This scam primarily targets users on popular messaging platforms like WhatsApp, where scammers impersonate friends, family, or even customer service agents. They often create urgency, asking victims for quick payments or sensitive account details. This scam has been reported widely across India from metro cities to smaller towns, emphasized by RBI and CERT-In advisories highlighting increasing UPI-related fraud incidents.

In response, the Reserve Bank of India (RBI), alongside the Indian Computer Emergency Response Team (CERT-In) and the Indian Cyber Crime Coordination Centre (I4C), is ramping up regulations and technology safeguards to curb such digital payment fraud. These include new authentication methods, transaction monitoring, and mechanisms to “kill” fraudulent transactions before funds move out of victims’ accounts irreversibly.

How This Scam Works — Step by Step

1. Initial Contact via WhatsApp or Phone Call: A scammer sends a message pretending to be a trusted contact (e.g., a close friend, relative, or bank employee). The message often mentions an emergency or urgent request, pressuring the victim to act quickly.

2. Building Trust: The fraudster may share some personal details or mimic writing style to appear genuine. They may also claim to be helping verify transaction details or bank information for security reasons.

3. Request for Payment or Information: The scammer sends a UPI payment request or asks for OTPs (One-Time Passwords), bank PIN, or Aadhaar-linked authentication details under the pretense of verifying or unlocking an account.

4. Triggering Unauthorized Transactions: Using the collected data or a fake payment link, the scammer quickly initiates transfers from the victim’s UPI-linked bank accounts.

5. Activating the “Kill Switch” Feature: If the victim suspects fraud and informs the bank or apps at this stage, the new RBI “kill switch” can quickly block or reverse suspicious transactions before funds clear.

6. Disappearance: Once the money is transferred, fraudsters cut off communication, making recovery of funds difficult without timely intervention.

Real Warning Signs to Watch For

• Urgent payment requests from contacts that seem out of character or unexpected.
• Messages urging you not to share OTPs or PINs but paradoxically requesting those details.
• Unsolicited calls or messages claiming to be from the bank but with poor grammar or unfamiliar phone numbers.
• Requests to click on payment links or QR codes shared via WhatsApp or SMS.
• Pressure tactics like threats of account suspension or legal action to force quick compliance.
• Verification requests asking for Aadhaar or UPI PIN under unclear pretenses.
• Stranger-to-stranger or friend-of-friend payment requests without prior transaction history.

What Happens to Victims

Victims often lose thousands or even lakhs of rupees instantly through UPI or wallet payments. Since UPI transactions are usually instantaneous and irrevocable, unauthorized transfers can drain bank accounts before users notice. The misuse of Aadhaar-linked authentication and SIM swap attacks can exacerbate losses by allowing scammers to bypass two-factor authentication.

Beyond financial loss, victims face emotional distress and stress due to betrayal by fake “trusted” persons. Many feel vulnerable as their personal data can be exploited further, exposing them to identity theft or repeated fraud. Recovery is challenging since banks and police authorities require quick action to reverse or freeze transactions.

What RBI and CERT-In Say

The RBI has issued multiple advisories urging users to be cautious about unsolicited payment requests and to never share UPI PINs or OTPs. It has mandated banks and payment service providers to implement transaction monitoring and instant fraud detection tools.

CERT-In regularly warns about phishing through WhatsApp and SMS and encourages reporting and blocking suspicious contacts. The Indian Cyber Crime Coordination Centre (I4C) works with state police to handle rising cases of UPI fraud, emphasizing awareness and prompt reporting.

For help, RBI’s customer helpline is available, and victims can report cybercrime via the national helpline number 1930 or file complaints on cybercrime.gov.in.

How to Protect Yourself

1. Never share your UPI PIN, OTP, or Aadhaar details with anyone—no matter who they claim to be.
2. Verify payment requests by calling your contact through a known number rather than replying to messages.
3. Enable transaction alerts on your mobile for all bank and UPI transactions.
4. Use app lock features and biometric authentication on banking apps to add extra security layers.
5. Avoid clicking on payment or QR code links sent via WhatsApp or social media unless verified.
6. Immediately report any suspicious transaction or communication to your bank and block the sender.
7. Set transaction limits and opt for SMS or app confirmation for all payments.

What to Do If You’ve Been Targeted

• Immediately contact your bank to block your UPI transactions and debit cards.
• Report the incident to the cybercrime helpline by dialing 1930 or visiting cybercrime.gov.in.
• File a police complaint providing all details of communication, transaction IDs, and scam narratives.
• Notify WhatsApp or the messaging platform about scammer accounts.
• If Aadhaar misuse is suspected, update your Aadhaar details via UIDAI’s official channels or seek help from local Aadhaar centers.
• Use RBI grievance mechanisms or customer care to escalate unresolved cases.

Frequently Asked Questions

Q1: Can RBI reverse fraudulent UPI transactions if reported in time?
Yes, RBI mandates banks to quickly investigate fraud complaints. If reported within 3-4 days, there’s a chance of transaction reversal, especially with the new kill switch features, but swift action from victims is critical.

Q2: How can I confirm if a payment request on WhatsApp is genuine?
Always verify by calling your contact directly on a saved mobile number. Genuine requests typically come with prior context. Avoid responding directly or clicking on links you receive unsolicited.

Q3: What should I do if I accidentally shared my UPI PIN or OTP?
Immediately block your bank account or UPI app, inform your bank, and report to the cybercrime helpline 1930. Change all related app passwords and monitor account activity closely for any unauthorized use.

Digital payments are convenient but must be secured with awareness. Whenever you get a suspicious message or call asking for payment or sensitive info, pause and verify — don’t rush. To check suspicious messages and stay informed about scams, visit BharatSecure.app. Stay alert, stay safe!