RBI considers delay for large UPI transfers — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 25, 2026

Severity: MEDIUM | View Full Scam Details

RBI Considers Delay for Large UPI Transfers in India 2026: What You Must Know About This Growing UPI Fraud

UPI fraud is evolving rapidly, and now scammers exploit large fund transfers to trick Indian users — the RBI is even considering delaying such transactions to fight back.

What Is the RBI Considers Delay for Large UPI Transfers Scam?

This scam revolves around criminals targeting large-value UPI payments in India, typically those exceeding ₹10,000. With UPI being the backbone of India’s digital payments ecosystem—processing lakhs of crores daily—fraudsters see an opportunity to exploit the ease and speed of such transfers. The Reserve Bank of India (RBI) has recognized the risk and is currently considering introducing a delay or additional verification checks for larger UPI transactions to curb fraud.

Victims often include digitally active individuals who frequently use apps like Google Pay, PhonePe, Paytm, or BHIM for significant payments—whether to service providers, merchants, or even private individuals. These scams have become increasingly widespread, particularly on platforms like WhatsApp, where scammers create fake profiles impersonating friends or family members to gain trust.

Due to the rise in such incidents, India’s Computer Emergency Response Team (CERT-In) and the Indian Cyber Crime Coordination Centre (I4C) have issued advisories cautioning users about social engineering tactics and urging banks and payment platforms to implement safer transaction protocols. While the delay policy by RBI hasn’t been implemented nationwide yet, this move signals the growing importance of securing UPI against such fraud.

How This Scam Works — Step by Step

1. Initial Contact via WhatsApp or Social Media: Scammers create fake profiles mimicking your contacts or trusted brands. They message you with urgent requests, often pretending to be a family member in distress, a merchant confirming a purchase, or even a bank official.

2. Building Trust and Urgency: They use emotional manipulation. For example, the “friend” might say they need an immediate large payment due to an emergency or limited-time offer. Sometimes they pose as government officials threatening legal action.

3. Request for Large UPI Transfer: Once trust is gained, they ask you to transfer an amount usually over ₹10,000 via UPI. They might insist this is a time-sensitive transaction requiring your quick authorization.

4. Convincing You to Share OTP or UPI PIN: To finalize the transaction, scammers persuade victims to share the OTP or UPI PIN received on their mobile. This compromises the victim’s UPI account.

5. Transaction Approved and Funds Drained: Using the OTP or PIN, the fraudster completes the transaction instantly, leaving the victim with an unauthorized debit.

6. Victim Realises the Fraud: By the time the victim notices, the money is already transferred. Attempting to reverse the transaction is difficult because UPI transfers are generally instant and irrevocable.

Real Warning Signs to Watch For

• Unsolicited messages from “friends” asking for urgent money through UPI, especially large amounts over ₹10,000.
• Requests to share OTP or UPI PIN under any pretext.
• Profiles with incomplete details or new WhatsApp accounts claiming to be existing contacts.
• Pressure tactics: urgency, threats of police/legal action, or limited-time offers.
• Messages that contain poor grammar, spelling mistakes, or are inconsistent with your usual chat history.
• Unusual requests for money involving alternate UPI IDs/phone numbers different from the usual ones used by your contact.
• Any insistence on disabling bank transaction alerts or sharing sensitive Aadhaar or account details.

What Happens to Victims

Victims often face immediate financial loss as the money is transferred instantly and cannot be reversed easily. Unlike credit card fraud, UPI payments often don’t have a formal "chargeback" mechanism, which means banks find it hard to recover lost funds unless victims report fraud quickly. Emotional distress also hits hard — many victims feel betrayed when impersonated by known contacts and anxious dealing with the aftermath.

Furthermore, scammers sometimes steal Aadhaar details or conduct SIM swaps after gaining trust, leading to longer-term identity theft and financial abuse. Repeated fraud can cause damage to victims' creditworthiness and disrupt their financial lives. The emotional trauma can also result in loss of trust in digital payments, impacting everyday transactions and confidence in government-backed systems like Aadhaar and UPI.

What RBI and CERT-In Say

The Reserve Bank of India has repeatedly warned users about UPI scams and advised banks to educate customers on secure transaction practices. The RBI set up a dedicated UPI helpline and urged payment service providers to implement transaction limits and layered security checks. RBI’s current contemplation on introducing a delay for large transfers aims to add a buffer window for catching fraudulent transactions before they finalize.

CERT-In and the Indian Cyber Crime Coordination Centre (I4C) also issue frequent alerts on social engineering scams involving UPI. The official cybercrime helpline number 1930 and the RBI Customer Contact Centre number 1800-112-111 are recommended for victims to report suspicious activity. These agencies work closely with banks and telecom companies to detect and prevent fraud, especially where SIM swaps and Aadhaar misuse are involved.

How to Protect Yourself

1. Never share your UPI PIN or OTP with anyone — not even family or bank officials.
2. Verify requests for money independently by calling your friends or family directly.
3. Check WhatsApp profile details carefully—if unsure, ask questions only your genuine contacts would answer.
4. Enable UPI transaction alerts via SMS or app notifications immediately.
5. Use two-factor authentication (2FA) and app-level passwords on your UPI apps.
6. Set UPI transaction limits for large transfers and avoid bulk or frequent transfers to unknown IDs.
7. Report any suspicious WhatsApp accounts or messages to WhatsApp and local cybercrime units promptly.

What to Do If You've Been Targeted

1. Immediately block the fraudster’s number and capture screenshots of all conversations or transaction details.
2. Contact your bank or UPI app customer support and request to freeze your account/UPI to prevent further transfers.
3. Report the incident at the nearest cybercrime police station or use the online portal cybercrime.gov.in for filing complaints.
4. Call the 1930 cybercrime helpline to lodge your grievance and get expert advice.
5. Inform your telecom provider if you suspect SIM swap fraud, and get your SIM blocked if necessary.
6. Keep all complaint numbers or FIR receipts handy for follow-up and assistance.

Frequently Asked Questions

Q: Will the RBI’s proposed delay for large UPI transfers prevent all fraud?
A: No, while the delay can add a layer of security by allowing time for fraud detection, scammers may adapt their tactics. Users still need to remain vigilant and follow best safety practices.

Q: Can I get back money lost in a large UPI scam?
A: Recovering lost funds via UPI is difficult because transactions are instant and final. However, reporting quickly to banks and cyber authorities improves chances of investigation and possible refunds if fraud is confirmed.

Q: How can I verify if a WhatsApp message requesting money is genuine?
A: Always independently contact the person on a separate channel (call or message on their known number) before sending any money. Look for inconsistencies in language or behavior that you do not recognize.

UPI fraud is real and evolving rapidly in India, but you don’t have to be a victim. To verify suspicious messages or to learn more about how to stay safe, visit BharatSecure.app — your trusted partner in digital fraud awareness and prevention. Stay alert, stay secure!