RBI may soon make you wait an hour before your UPI transfers goes through — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 26, 2026

Severity: MEDIUM | View Full Scam Details

Beware in 2026: RBI May Make You Wait an Hour Before Your UPI Transfers—A New Scam Targeting Indian Digital Payments

If you see messages warning that your UPI transfers will be delayed by an hour soon, it might be a scam designed to steal your money or personal data.

What Is the RBI May Soon Make You Wait an Hour Before Your UPI Transfers Goes Through?

This emerging scam revolves around a fake advisory falsely attributed to the Reserve Bank of India (RBI) about delays in UPI (Unified Payments Interface) transactions. Scammers claim that due to new RBI rules, UPI payments will take at least an hour to process. They exploit this misinformation to create a sense of urgency or confusion among users who rely heavily on instant digital payments—a daily norm for millions across India for bill payments, groceries, and sending money to family.

The scam targets everyday UPI users through WhatsApp forwards, SMS, and fake emails impersonating RBI or bank officials. These messages often claim that users must verify their accounts or “update settings” urgently to avoid losing access or incur penalties. In truth, no announced RBI regulation enforces such a generic one-hour delay on all UPI transactions; UPI remains an instant payment system as per the latest RBI and NPCI guidelines.

This scam taps into widespread trust in RBI and fears about digital fraud, spreading quickly across metros and smaller towns — especially among less tech-savvy users. CERT-In and I4C (Indian Cyber Crime Coordination Centre) continue to monitor similar phishing attempts exploiting the UPI ecosystem but have not officially confirmed any RBI notification asking for transaction delays.

How This Scam Works — Step by Step

1. Initial Contact: Victims receive a WhatsApp message or SMS appearing to be from RBI or their bank. The message warns that due to regulatory changes, UPI transfers will now take an hour or more and instructs users to click a link to “update their payment profile.”

2. Fake Website or OTP Request: The provided link leads to a convincing-looking website that mimics RBI or bank portals. Users are asked to enter sensitive data—UPI PIN, OTP (One-Time Password), Aadhaar number, or even bank login credentials—under the pretext of verifying identity or “activating instant payments.”

3. Sharing OTP or Personal Details: Some victims are prompted to share OTPs sent by their bank to complete the verification. In reality, these OTPs allow scammers to authorize unauthorized transactions through UPI.

4. Unauthorized Transactions: Using the stolen credentials and OTP, fraudsters immediately make transfers to unknown accounts, draining victims’ bank balances.

5. Victim Realizes Too Late: The one-hour delay story is just a ploy to reduce suspicion when victims check transaction timestamps or complain about missing money.

Real Warning Signs to Watch For

• Messages claiming RBI-imposed UPI delays without official RBI communication or website links.
• Urgent demands to click links or update payment details immediately.
• Requests for OTPs, UPI PIN, Aadhaar numbers, or passwords in messages, calls, or websites.
• Poor grammar, spelling mistakes, or awkward English in the message or website.
• Links that do not direct to official RBI or bank URLs (always check the domain).
• Unsolicited calls or messages from unknown “bank officials” asking for personal information.
• Offers or warnings that pressure you to act within minutes.

What Happens to Victims

Victims often face sudden loss of funds from their bank accounts linked to UPI. Since UPI transactions are instant and irreversible once completed, banks and NPCI usually reverse only mistaken or fraudulent transactions reported promptly. Many people lose thousands of INR, draining monthly budgets or emergency savings.

Beyond financial loss, victims grapple with the emotional trauma of identity theft or bank fraud stress. Some experience Aadhaar misuse if details are leaked, which can lead to pan-India problems like SIM swap frauds or fake loan applications in their name. For many in tier-2 and tier-3 cities, recovery is slow, complicated by limited awareness or bureaucratic delays.

What RBI and CERT-In Say

RBI, India’s banking regulator, officially mandates that UPI transactions remain instant and has not issued any directive causing mandatory transaction delays. In fact, RBI continuously warns users against phishing attempts and urges verification only via official RBI or bank portals.

CERT-In regularly publishes cybercrime advisories emphasizing vigilance against phishing on payment apps and scams impersonating banks or regulatory authorities. The Indian Cyber Crime Coordination Centre (I4C) recommends users never share OTPs or PINs and report suspicious activity immediately.

For assistance, RBI helpline numbers and CERT-In’s 1930 cybercrime helpline are available for fraud reporting and guidance.

How to Protect Yourself

1. Ignore Messages Urging Immediate Action: Do not click on links or share data from unexpected RBI or bank messages.
2. Verify from Official Sources: Check RBI’s official website or your bank’s app for announcements about payment changes.
3. Never Share OTP or UPI PIN: Legitimate entities will never ask you for these over calls, SMS, or WhatsApp.
4. Use Official Apps Only: Always transact through trusted UPI apps like BHIM, Google Pay, PhonePe, or your bank’s app.
5. Check URLs Carefully: Avoid clicking on links with unfamiliar or misspelled domain names.
6. Enable UPI Transaction Limits: Set daily and per-transaction limits via your bank to minimize losses.
7. Report Suspicious Messages: Use BharatSecure.app to verify questionable messages before responding or sharing.

What to Do If You’ve Been Targeted

1. Immediately block the scammer’s number and do not respond to further messages.
2. Change your UPI PIN through your bank’s official app without using any suspicious links.
3. Contact your bank’s customer care or visit your branch to report the fraudulent transaction.
4. File a complaint on the Ministry of Home Affairs’ cybercrime portal at cybercrime.gov.in.
5. Call the 1930 CERT-In cybercrime helpline for further assistance.
6. Inform your bank and request a temporary freeze on transactions to prevent further losses.
7. If Aadhaar details were shared, also report to UIDAI’s helpline to check for misuse.

Frequently Asked Questions

Q: Is RBI really delaying all UPI transfers by an hour from 2026?
A: No, RBI has not announced any such delay. UPI remains an instant payment system. Messages claiming otherwise are scams.

Q: What should I do if I accidentally shared my OTP with scammers?
A: Change your UPI PIN immediately, inform your bank, and block your UPI payment access. Report the incident to cybercrime authorities.

Q: How can I verify if a message about UPI or RBI is authentic?
A: Always cross-check with RBI’s official website, your bank’s customer service, or trusted sources like BharatSecure.app before taking any action.

If you receive suspicious messages about UPI delays or RBI advisories, do not panic or respond. Verify every message carefully on BharatSecure.app to protect your money and identity from scammers. Stay alert, stay safe.