From trusted persons to kill switch: 6 ways how RBI is planning to safeguard your online payments — How to Identify & Stay Safe

Severity: MEDIUM | View Full Scam Details

From Trusted Persons to Kill Switch: 6 Ways How RBI Is Planning to Safeguard Your Online Payments in 2026

UPI fraud in India continues to grow as scammers impersonate trusted contacts, but RBI’s new measures aim to protect you from losing money through digital payments.

What Is the From Trusted Persons to Kill Switch Scam?

This scam preys on the trust Indians place in family, friends, and acquaintances when using apps like Google Pay, PhonePe, or Paytm for UPI transactions. Fraudsters create fake profiles or hack accounts on messaging platforms like WhatsApp to pose as someone you know. They then manipulate you into transferring money or sharing sensitive details like OTPs or UPI PINs.

The scam targets everyday internet users who routinely use UPI for everything from bill payments to sending money to relatives. It has become alarmingly widespread, with millions falling victim yearly according to data collected by I4C (Indian Cyber Crime Coordination Centre). RBI and CERT-In have issued multiple advisories urging the public to stay vigilant, emphasizing that no bank or government agency asks for OTP or PIN over calls or messages. The Reserve Bank of India is now developing six key safety features to reduce the risk posed by such social engineering attacks.

How This Scam Works — Step by Step

1. Initial Contact via WhatsApp or SMS: You receive a message from a number that appears to be your trusted friend or family member. Sometimes, the attacker hijacks the original account or creates a near-identical fake profile.

2. Building Trust with a Personal Request: The scammer asks for urgent help — often with a small financial request related to an emergency or payment issue.

3. Request for Transaction or Information: They request a money transfer via UPI or ask you to share your 6-digit UPI PIN or OTP, claiming it is to facilitate the transaction.

4. Fake OTP or Verification Message: The victim receives an OTP (one-time password) and, trusting the requester, shares it back. Sometimes the scammer convinces the victim to enter the PIN directly into a malicious app or link.

5. Money Transfer or Data Theft: Once the scammer has the OTP or PIN, they complete unauthorized transactions draining the victim’s bank account.

6. Covering Tracks with Fake Messages: The scammer may send fake confirmation messages or block the victim to delay suspicion.

Real Warning Signs to Watch For

• Unexpected messages from “trusted” contacts asking for money or sensitive details, especially if the language or tone feels off.
• Urgency and pressure to share OTPs or UPI PIN immediately.
• Requests to verify transactions you did not initiate or approve.
• Messages coming from newly created or slightly altered phone numbers (e.g., your friend’s number with a small change in digits).
• Requests to install apps or click on links to “help” with payments.
• Contact pretending to be a bank official or RBI representative asking for sensitive banking info.
• Repeated follow-up messages or calls after a transaction request to manipulate or rush you.

What Happens to Victims

Victims often face immediate financial loss, with amounts ranging from a few hundred to lakhs of rupees deducted from their linked bank accounts. The funds are typically transferred out quickly, making reversal through UPI refund processes difficult or impossible once the scammer withdraws or transfers the sum further.

Emotionally, the breach of trust can be devastating — especially if the scam involves impersonation of family members. The victim may also face complications with linked Aadhaar-based KYC fraud or even SIM swap attacks that put their entire mobile identity and banking access at risk. Without quick action, victims can struggle to recover balances, and unauthorized transactions may appear in credit reports affecting future financial credibility.

What RBI and CERT-In Say

The RBI has warned repeatedly that no bank or payment platform will ask for your UPI PIN or OTP on calls or messages. RBI’s Customer Awareness Advisory highlights social engineering fraud as a growing concern. The 1930 Cybercrime helpline and the RBI helpline are critical resources for victims.

CERT-In, the Indian government’s nodal agency for cybersecurity, regularly issues alerts on new scam tactics, especially related to UPI and mobile banking fraud. Their advisory framework includes urging users to report suspicious messages and transaction requests promptly to banks and law enforcement.

The I4C under MHA (Ministry of Home Affairs) coordinates with police forces nationwide to track and prosecute these fraud operations. Together, these agencies support initiatives like RBI’s upcoming “kill switch” — which will allow users to instantly block or limit UPI transactions on their app if they suspect fraud.

How to Protect Yourself

1. Never share your OTP or UPI PIN with anyone, even if they claim to be from your bank or RBI.
2. Verify requests via a separate call or in-person to the person supposedly asking for money.
3. Regularly check your UPI app transaction history for any unauthorized activity.
4. Use RBI’s “kill switch” feature (when available) or immediately disable UPI payments from your app if something feels wrong.
5. Do not click on suspicious links or download untrusted apps related to payments.
6. Register your mobile number with the Do Not Disturb (DND) service to reduce spam messages.
7. Keep your Aadhaar and mobile accounts secure; update passwords and PINs regularly.

What to Do If You've Been Targeted

• Immediately call your bank’s customer care and block UPI transactions or your payment app.
• Report the fraud to the 1930 Cybercrime Helpline and file a complaint on cybercrime.gov.in.
• Inform your mobile operator about possible SIM swap risks and request additional security features.
• Change your UPI PIN and all linked passwords right away.
• Keep all messages, transaction IDs, and call records handy for police and bank investigations.
• Notify RBI’s helpline if instructed by your bank or cyber authorities.

Frequently Asked Questions

Q: Can RBI really stop all UPI fraud with its kill switch?
A: The RBI’s kill switch is a powerful tool to instantly suspend your UPI transactions when you sense suspicious activity. While it reduces damage, users must stay alert and not share sensitive information to fully prevent fraud.

Q: What if I accidentally shared my OTP or PIN?
A: Immediately block your UPI ID and call your bank. Report the fraud on the 1930 helpline and file a police complaint. Early action may help recover lost funds, but prevention is best.

Q: Are WhatsApp messages from my family safe to trust for payment requests?
A: Always confirm offline before transferring money. Scammers often hack or clone WhatsApp accounts to impersonate family members. Never share OTPs or PINs through chat messages.

To stay safe from scams that look like trusted people asking for money, verify every unusual message and transaction request at BharatSecure.app — the fastest way to protect yourself and your money.