RBI brings cross border transactions under e-mandate rules — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 26, 2026

Severity: MEDIUM | View Full Scam Details

RBI Brings Cross-Border Transactions Under E-Mandate Rules Scam in India 2026: Beware UPI Fraud Alert

Scammers are exploiting RBI’s new e-mandate rules for cross-border transactions to trick Indians into financial fraud via WhatsApp and social media.

What Is the RBI Brings Cross-Border Transactions Under E-Mandate Rules Scam?

In 2026, the Reserve Bank of India (RBI) extended e-mandate regulations—originally for domestic recurring payments like subscriptions and EMIs—to cover cross-border transactions. While this move aims to bring transparency and control for consumers using international digital payments, fraudsters have quickly turned this goodwill into a tool for scams.

The scam targets Indian UPI users and digital payment customers who make or receive payments to/from overseas entities—businesses, freelancers, and online shoppers using international platforms. Fraudsters create fake WhatsApp profiles or social media pages posing as foreign companies or payment facilitators offering easy recurring payment plans or subscriptions under this new RBI rule.

The scam is growing, especially among those less familiar with digital payments or recent RBI advisories. The Indian government’s Indian Computer Emergency Response Team (CERT-In) and the Interpol-run Indian Cyber Crime Coordination Centre (I4C) have noted rising complaints involving such fraudulent mandates for foreign payments over the past year.

RBI has advised users to be cautious, emphasizing always verifying the authenticity of e-mandate requests and avoiding sharing UPI PIN or OTPs. However, the sophistication and anonymity of scammers make the challenge significant.

How This Scam Works — Step by Step

1. Initial Contact via WhatsApp or Social Media: Scammers approach victims by posing as representatives of reputed “foreign businesses” or international subscription services. Messages often appear professional, sometimes using stolen logos or fake review profiles.

2. Offering “Easy” Cross-Border Recurring Payments: They pitch e-mandate-based recurring payments for services like overseas streaming, freelance work payments, or subscription boxes. The message stresses RBI's new e-mandate rules as a “safe, government-backed” way to pay abroad.

3. Creating Fake Payment Links or Forms: Victims receive fraudulent UPI payment links or forms pretending to be RBI-authorized e-mandate requests. These links may request sensitive information such as Aadhaar number, PAN, or UPI PIN.

4. Urgency and Fear Tactics: Scammers push victims to complete payments quickly, warning that failure will lead to service suspension or penalty fees due to RBI compliance.

5. Victim Authorizes Payment or Shares OTP/UPI PIN: Believing the payment is legitimate, victims enter their UPI PIN or share OTPs sent to their phone, unknowingly granting recurring payment access.

6. Unauthorised Fund Transfers Occur: Using the e-mandate, scammers initiate multiple transactions, draining linked bank accounts in INR without victim consent.

7. Victims Realise Only After: Usually victims discover the fraud after checking bank statements, noticing repeated or large cross-border debits they never authorised.

Real Warning Signs to Watch For

• Unexpected WhatsApp messages or Facebook DMs offering foreign subscription services with recurring payments.
• Unsolicited payment links asking for UPI PIN, OTP, Aadhaar, or PAN details.
• Pressure to complete payment immediately citing “RBI rules” or government compliance deadlines.
• Links or messages with poor grammar, fake logos, or inconsistent company information.
• Requests to share personal banking information or QR codes scanned via phone.
• Promises of cashback or incentives for international e-mandates that seem too good to be true.
• No clear customer support contact details or refusal to provide official receipts.

What Happens to Victims

Financially, victims can lose thousands or lakhs of rupees due to multiple unauthorised UPI debits linked to their bank accounts. Unlike domestic UPI fraud cases, cross-border transactions can be harder to reverse due to international money transfer complexities.

Emotionally, victims suffer stress, fear of identity theft, and loss of trust in digital payments. In many cases, scams cause linked Aadhaar or PAN information misuse, affect credit scores, and invite further targeted attacks like SIM swap fraud, amplifying damage for Indian users.

Victims may face long delays in recovering funds through banks or RBI dispute mechanisms. The fear of funds being permanently lost forces many to practice overly cautious digital behaviour, reducing adoption of valuable cross-border digital services.

What RBI and CERT-In Say

RBI regularly updates guidelines for UPI and e-mandate safety and issues public advisories when new fraud patterns emerge. Though RBI’s 2026 e-mandate expansion aims to protect consumers, the regulator warns users never to share UPI PINs or OTPs and to authenticate all payment requests through official bank apps.

CERT-In has urged citizens to report suspicious messages and links immediately to bolster their cyber fraud database. The Indian Cyber Crime Coordination Centre (I4C) coordinates with banks and telecom providers to trace fraud sources and block scam campaigns effectively.

If you detect fraud or want to verify suspicious transaction requests, contact RBI helpline at 1800-111-555 (toll-free) or CERT-In at 1930 (cybercrime helpline).

How to Protect Yourself

1. Never Share UPI PINs or OTPs: Legitimate payment systems, including RBI-regulated e-mandates, never ask for these via WhatsApp or social media.
2. Verify Businesses Independently: Don’t trust unsolicited messages. Check official company websites or RBI notifications for cross-border payment guidelines.
3. Use RBI-Approved Payment Apps Only: Avoid clicking on links; open apps yourself and verify pending mandates.
4. Beware of Urgency Tactics: Take your time. Contact customer support of the business or your bank before authorising payments.
5. Regularly Check Bank Statements: Monitor for unexpected debits, especially for cross-border transactions.
6. Enable Transaction Alerts: Ensure mobile and email alerts are active for every UPI or international payment.
7. Report Suspicious Activity Immediately: Inform your bank and file complaints with cybercrime.gov.in or call 1930 helpline.

What to Do If You've Been Targeted

1. Immediately Block Payment Mandates: Log into your UPI or net banking app to revoke any recent e-mandate authorisations.
2. Inform Your Bank: Report unauthorised transactions promptly to initiate a dispute and potential fund recovery.
3. File a Police Complaint: Register an FIR mentioning cross-border UPI fraud and provide evidence like WhatsApp messages or screenshots.
4. Report Online at cybercrime.gov.in: India's national cyber crime reporting portal collects digital fraud complaints for faster action.
5. Contact 1930 Cybercrime Helpline: Reach out for expert guidance on next steps and victim support.
6. Change Your UPI PIN: After cancelling e-mandates, reset your UPI PIN immediately to prevent further misuse.
7. Monitor Aadhaar and PAN Usage: Use UIDAI and Income Tax portals to check for any fraudulent activity linked to your identity.

Frequently Asked Questions

Q: How is the RBI e-mandate rule connected to this scam?
A: RBI’s expansion of e-mandate rules to cross-border payments introduced new payment authorization workflows. Scammers exploit this change by mimicking official processes to trick victims into authorizing fraudulent recurring payments.

Q: Can I get my money back if I was scammed through such an e-mandate?
A: It depends. Banks and RBI might reverse unauthorised transactions if reported quickly and proof of fraud is strong. However, cross-border fraud cases can be complex and take longer compared to domestic UPI disputes.

Q: How do I check if a recurring payment or mandate is legitimate?
A: Always check your payment apps’ mandate or subscription section. Legitimate mandates will appear in your bank’s official UPI app with complete details. Avoid clicking links from unknown sources and verify directly from service providers.

India’s digital payment space keeps evolving, and scams change with it. Stay alert about new RBI rules and verify every suspicious message before acting. If you receive an unusual UPI mandate or payment request related to cross-border transactions, don’t panic or rush.

Verify it now for free at BharatSecure.app — India’s trusted digital fraud awareness platform. Protect your money and stay safe online!