RBI proposes 'kill switch' for digital payments to combat fraud — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 26, 2026

Severity: MEDIUM | View Full Scam Details

RBI Proposes ‘Kill Switch’ for Digital Payments in 2026 to Combat Rising UPI Fraud in India

UPI fraud is evolving rapidly, and the Reserve Bank of India’s new ‘kill switch’ proposal aims to give users a quick way to stop digital payment transactions and protect their money.

What Is the RBI Proposes ‘Kill Switch’ for Digital Payments to Combat Fraud?

With digital payments using UPI (Unified Payments Interface) skyrocketing in India, fraudsters are increasingly targeting everyday users through sophisticated scams. To fight these growing threats, the Reserve Bank of India (RBI) has proposed introducing a “kill switch” feature that will allow users to instantly freeze or block all outgoing UPI transactions across apps, helping to stop fraudulent transactions in progress.

This proposal targets millions of Indians who face losses from UPI-related scams, often executed via WhatsApp, Facebook, or fake calls impersonating bank or tech support staff. As per RBI’s data and Indian Cyber Crime Coordination Centre (I4C), UPI fraud cases saw a noticeable rise in 2025, prompting regulators to consider stronger safety measures.

The kill switch is still under consultation but has already received strong backing from CERT-In (Indian Computer Emergency Response Team). RBI has also issued multiple advisories warning users about fake messages and phishing attempts designed to steal UPI PINs or OTPs. This new tool is set to empower users with control, potentially reducing fraud losses estimated in crores of INR every year.

How This Scam Works — Step by Step

UPI fraudsters use social engineering and technology tricks to fool users into giving away sensitive information or authorizing fake transactions. Here’s a typical scam scenario:

1. Initial Contact: The scammer sends an unsolicited WhatsApp message or a phone call, pretending to be a bank official or RBI representative. They may use official logos and formal language to appear credible.

2. Creating Urgency: They claim there is suspicious activity or an urgent problem with the victim’s bank or UPI account, pressuring them to take immediate action. Sometimes, they say the account will be blocked or money lost if not verified urgently.

3. Tricking the Victim: The scammer asks the victim to share sensitive details like UPI PIN, OTPs, or Aadhaar OTP, often under the pretense of "verifying" transactions or "securing" the account.

4. Authorising Fraudulent Payment: Using the stolen PIN or OTP, the fraudster initiates multiple unauthorized money transfers from the victim’s bank account to unknown accounts.

5. Aftermath: By the time the victim realizes, the money is already transferred out. Victims may also get victims of SIM swapping, where the scammer takes control of the victim’s mobile number to bypass authentication.

Real Warning Signs to Watch For

• Unexpected calls or messages claiming to be from RBI, banks, or payment apps requesting sensitive info.
• Urgent demand to share UPI PIN, OTP, or Aadhaar OTP.
• Messages asking to click unknown links to “verify” or “secure” payment accounts.
• Offers to “help” block transactions but actually asking for remote access or screen sharing.
• Spelling mistakes or unusual language in official-looking messages.
• Demands to install suspicious apps or software for “security checks.”
• Pressure tactics insisting on immediate action with threats of account suspension or loss.

What Happens to Victims

Victims of UPI fraud often face significant financial loss as timely reversal of transactions is complicated. Though RBI mandates banks to refund fraud victims when negligence isn’t on the user, many still struggle with delays and disputes. In cases involving Aadhaar-based e-KYC misuse or SIM swapping, fraudsters gain persistent access, causing further risks beyond immediate monetary loss.

The emotional impact is also severe — victims feel violated, stressed, and helpless, especially older or less tech-savvy individuals. The fear of identity theft and recurring frauds results in lasting anxiety in a country where digital payment adoption is growing rapidly but awareness remains uneven.

What RBI and CERT-In Say

The Reserve Bank of India regularly issues warnings against UPI fraud and reminds users never to share UPI PIN or OTP with anyone, even if the caller claims to be bank staff. RBI has mandated strong customer authentication improvements and proposed the kill switch to allow immediate blocking of digital transactions.

CERT-In encourages reporting phishing attempts and suspicious communication. The Indian Cyber Crime Coordination Centre (I4C) supports victim assistance through its 24x7 helpline no. 1930 for cybercrime complaints, including payment fraud.

Banks also provide helplines; users should confirm official numbers from RBI’s website or their bank’s app before calling.

How to Protect Yourself

1. Never share your UPI PIN, OTP, or Aadhaar OTP with anyone over phone, WhatsApp, or email.
2. Use official bank or payment app channels only — do not click on links from unknown sources.
3. Install and regularly update antivirus and security apps on your smartphone.
4. Enable biometric/fingerprint authentication on your UPI app for an extra layer of security.
5. Regularly check your bank statements and UPI transaction history for unauthorized payments.
6. If you receive suspicious calls/messages, hang up and verify through official customer care.
7. Do not install unknown apps or provide remote access to your phone to anyone claiming to be tech support.

What to Do If You’ve Been Targeted

1. Immediately contact your bank’s customer service and request to block or freeze your UPI transactions.
2. Lodge a complaint on the National Cybercrime Reporting Portal at cybercrime.gov.in.
3. Call the cybercrime helpline number 1930 to report the scam and seek guidance.
4. File a First Information Report (FIR) with your local police cyber cell for documentation.
5. Monitor your bank accounts closely and change all passwords and PINs related to payments.
6. Inform your mobile service provider if you suspect SIM swap and request additional security checks.

Frequently Asked Questions

Q: What exactly does the RBI’s ‘kill switch’ do for UPI users?
A: The kill switch allows users to instantly stop all outgoing UPI transactions across all linked apps using a single command, reducing the damage caused by ongoing fraud.

Q: Can banks reverse UPI fraud transactions?
A: Banks can reverse transactions if fraud is proven and the user is not negligent, but the process can be slow. The kill switch aims to prevent such losses upfront.

Q: How can I differentiate a legitimate call from RBI/bank versus a scammer?
A: RBI or banks never ask for your UPI PIN, OTP, or Aadhaar OTP over phone or WhatsApp. They also do not force immediate action or request remote phone access.

Stay alert and protect your digital payments. If you ever receive suspicious messages or calls about your UPI or bank account, don’t panic—verify immediately with BharatSecure.app before responding or sharing any details. Your safety is in your control!