Money Credited By Mistake UPI Refund Scam — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 29, 2026

Severity: HIGH | View Full Scam Details

Beware of Money Credited By Mistake UPI Refund Scam in India 2026: How You Could Lose Your Money

A rising cybercrime threat in India involves fraudsters exploiting the popular UPI payment system by falsely claiming money was mistakenly credited to your account — then tricking you into returning it, only to steal your funds.

What Is the Money Credited By Mistake UPI Refund Scam?

This scam targets Indian bank customers who use UPI (Unified Payments Interface) for everyday transactions. Fraudsters pose as bank officials or payment app representatives and claim an amount has been wrongly transferred to the victim’s UPI-linked bank account. They pressure the victim to immediately refund the “extra” money received, often through peer-to-peer UPI transactions.

Scammers commonly approach victims via WhatsApp messages, phone calls, or sometimes SMS, using social engineering tactics to create urgency and fear of legal action. The scam has been reported widely across metro and non-metro areas, affecting people from students to working professionals. According to complaints reported to Indian cybercrime cells and I4C (Indian Cyber Crime Coordination Centre), the scam’s prevalence is increasing rapidly in 2026, partly driven by growing UPI adoption in India.

While there is no official RBI or CERT-In advisory exclusively on this scam yet, these agencies regularly warn about fraudulent refund claims and urge users to verify any transaction discrepancies through official banking channels only.

How This Scam Works — Step by Step

1. Initial Contact: The victim receives a WhatsApp message or a phone call from someone claiming to be from their bank, payment app, or a government helpline. The caller says a certain sum (₹5,000, ₹10,000, or higher) has been mistakenly credited to the victim’s UPI account.

2. Creating Urgency: The caller warns that if the money is not returned immediately, the victim’s account will be frozen or legal action will be taken, citing RBI or government directives for urgency.

3. Fake Transaction Proof: To gain trust, the fraudster shares a fabricated screenshot of the “credit” in the victim’s bank account or UPI app, often edited to look convincing.

4. Request to Refund: The victim is asked to send the “extra” money back via UPI to a specified ID or account on the spot. The caller may stay on the line, instructing the victim how to complete the transfer step-by-step.

5. Loss of Money: The victim initiates a UPI transfer, unknowingly sending money out. The original “credited” amount never existed. Sometimes multiple requests for refund follow or the scammer asks for an OTP claiming it is needed to reverse the transaction, resulting in further loss.

6. Aftermath: When the victim tries to check balances or contacts the bank, they realize no refund was ever due, and their money is gone. The fraudster may stop responding or continue harassing.

Real Warning Signs to Watch For

• You receive unsolicited calls or WhatsApp messages demanding immediate refund of a credited amount.
• Claim of “money credited by mistake” with pressure to act fast or face legal consequences.
• Use of fake and edited screenshots showing money credited to your account.
• Requests to transfer refund money via UPI to unknown IDs or accounts.
• The caller asks for OTPs or UPI PIN under the pretext of account verification or reversal.
• Attempts to prevent you from independently checking your bank or app statement.
• Caller uses formal-sounding titles but refuses to share official contact details or application-based verification.

What Happens to Victims

Victims in India experience immediate financial loss, often of sums that represent significant portions of monthly income. UPI transfers are instant and usually irreversible once done, making recovery difficult. Emotional stress and fear follow as victims worry about account safety, Aadhaar misuse, or even spoofing of their mobile SIM through related social engineering attacks.

Some victims face challenges with bank dispute resolution because the scam involves “voluntary” refunds given under pressure. This complicates proving fraud during recovery attempts. The usage of mobile wallets and Aadhaar-linked bank accounts in the scam makes many feel vulnerable in everyday digital payments.

What RBI and CERT-In Say

RBI has repeatedly cautioned users against sharing UPI PIN, OTP, or other credentials and to be wary of unsolicited refund requests. While there is no targeted advisory, RBI’s risk mitigation guidelines encourage verifying any unexpected credited amounts through official bank channels only, not over calls or messages.

CERT-In and I4C emphasize vigilance against social engineering scams exploiting UPI or payment apps. The National Cyber Crime Helpline (Dial 1930) is recommended for immediate assistance on such fraud cases. Banks also operate helplines and grievance redress channels under the Payment and Settlement Systems Act 2007.

How to Protect Yourself

1. Ignore Unsolicited Calls/SMS: Never trust calls or messages claiming money is credited by mistake without verifying independently.
2. Check Your Bank Statement: Log in directly to your official bank app or internet banking to verify any credited amount.
3. Avoid Sharing OTPs or UPI PIN: Never share your one-time passwords or UPI PIN with anyone, even if they claim to be bank officials.
4. Do Not Transfer Refunds to Unknown IDs: If you suspect a mistaken credit, confirm with your bank before returning money.
5. Use Official Bank Contact Channels: If in doubt, call the customer care number from your bank’s website or app, not the number given by the caller.
6. Report Suspicious Activity: Immediately report suspicious calls/messages to your bank and the 1930 cybercrime helpline.
7. Strengthen Your Account Security: Enable UPI app security features like biometric lock and regularly update passwords.

What to Do If You’ve Been Targeted

• Stop Further Transactions: Do not send any more money or share OTPs.
• Contact Your Bank Immediately: Inform them about the suspicious refund request and request to block UPI transactions temporarily if needed.
• File a Complaint: Lodge a cybercrime complaint at cybercrime.gov.in or call the 1930 national helpline.
• Report to Police: Visit your local cybercrime cell or police station to file an FIR using details of the scam.
• Record All Communications: Save screenshots, messages, and call logs for evidence.
• Inform Your Mobile Provider: Check for any SIM swap or mobile verification activity to prevent phone-based fraud.

Frequently Asked Questions

Q1: Can I get my money back if I transferred it by mistake to scammers?
Recovering money lost to UPI scams is difficult because transactions are instant and authorized by you. However, reporting quickly to your bank and cyber authorities increases the chances of luck and investigation. Always act fast.

Q2: How do scammers get my phone number or bank details?
Fraudsters use multiple methods like data leaks, phishing, social media scraping, or previous scam databases. Protect personal info, but remember that knowing your number alone doesn’t mean your money is at risk without your UPI PIN or OTP.

Q3: What is the safest way to verify if money was really credited to my account?
Always check your bank account or payment app directly. Do not rely on messages, screenshots, or third-party claims. Use official apps or internet banking, preferably on your secured device.

For any suspicious messages or calls about UPI refunds or transactions, verify immediately on BharatSecure.app and report incidents to the 1930 cybercrime helpline to help protect yourself and others.

Disclaimer: This article describes a pattern of fraud reported in public sources for public-safety awareness. It is not legal, financial, or medical advice. To request correction or removal of any content, write to hello@bharatsecure.app.