RBI Suggests Cooling-Off Period for UPI and Bank Transfers — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 11, 2026

Severity: MEDIUM | View Full Scam Details

RBI Suggests Cooling-Off Period for UPI and Bank Transfers in India 2026: A Growing UPI Fraud Concern

UPI users in India face a rising threat as scammers exploit instant transfers, prompting the RBI to recommend a “cooling-off period” to curb fraud losses.

What Is the RBI Suggests Cooling-Off Period for UPI and Bank Transfers?

As India’s digital payments boom continues, banking frauds linked to UPI and instant bank transfers have surged. Recognizing the danger, the Reserve Bank of India (RBI) has suggested implementing a “cooling-off period” to provide users a crucial window to cancel or double-check transactions before they are finalized. This scam leverages the speed and convenience of UPI, where money is transferred instantly, making it difficult for victims to reverse fraudulent transactions in time.

This threat primarily targets everyday Indians who frequently use WhatsApp, phone calls, or SMS for communication. Scammers mimic bank officials or government representatives, often creating a strong sense of urgency to trick victims into sharing OTPs or authorizing transfers. The Indian government’s cyber agencies like CERT-In and the Indian Cyber Crime Coordination Centre (I4C) have also issued warnings about the increasing sophistication of these fraudsters who prey on digital payment vulnerabilities.

With over 8 billion UPI transactions recorded monthly, the scale of this issue is massive. The RBI’s advisory encourages banks and payment service providers to consider introducing a delay mechanism, helping users verify transactions better and preventing immediate fund transfers to fraudsters’ accounts.

How This Scam Works — Step by Step

1. Initial Contact: A scammer contacts the victim through WhatsApp, a call, or SMS, pretending to be from the victim’s bank or even a government helpline.
2. Urgency & Fear Tactics: The scammer falsely claims the victim’s bank account is compromised or that suspicious UPI transactions have been detected, creating urgency.
3. Request for Sensitive Information: The victim is then asked to share OTPs, PINs, or other personal information, often under the pretext of “verifying” or “blocking” the account.
4. Immediate Transactions: Using the gathered details, the fraudsters initiate UPI or bank transfer transactions, quickly moving money out through beneficiary accounts set up under fake names.
5. Money Vanishes: Because UPI transactions are near-instant and irreversible without bank intervention, victims find themselves unable to recover amounts transferred—often ranging from a few hundred to lakhs of INR.
6. Aftermath Contact: Sometimes, scammers even call again, pretending to be bank recovery agents, asking victims to transfer more funds for “insurance” or “reversal fees,” further draining victims.

Real Warning Signs to Watch For

• You receive calls or messages asking for OTP, PIN, or bank credentials.
• Urgent warnings about account blocks or fraud, pressuring immediate action.
• Unknown numbers or messaging accounts pretending to be your bank or RBI employee.
• Requests to share screenshots of banking apps or payment confirmation pages.
• Demands to approve transactions you did not initiate.
• Advice to install remote access apps or click suspicious links during the call.
• Multiple messages or calls increasing in frequency within a short time.

What Happens to Victims

Victims often face heavy financial losses, with amounts debited immediately via UPI or NEFT/IMPS transfers. Since UPI payments typically can’t be reversed easily once authorized, banks and payment apps may take weeks to investigate, during which time scammers vanish.

Emotionally, victims experience stress, helplessness, and fear of identity theft, especially when fraudsters misuse Aadhaar numbers or conduct SIM swap attacks to gain more control. Family members dependent on these funds, such as elderly parents or small business owners, face the brunt of these scams.

What RBI and CERT-In Say

RBI has repeatedly cautioned users against sharing OTPs or passwords during calls or messages. In its February 2026 circular, RBI suggested a “cooling-off period” where banks could allow a short wait time before finalizing UPI/bank transfers, to help detect fraud. Customers were advised to verify transaction details thoroughly.

CERT-In urges users to report cyber fraud through its portal and to use India’s 1930 cybercrime helpline for immediate assistance. Both institutions encourage awareness around phishing calls and the importance of not sharing sensitive details online or over the phone. The RBI helpline (1800 11 5566) and CERT-In resources offer crucial support for affected users.

How to Protect Yourself

1. Never share OTPs or PINs: Banks or RBI never ask for these over a call or WhatsApp.
2. Verify calls: Hang up and call your bank’s official number if you receive suspicious calls.
3. Check transaction messages: Always cross-verify UPI transaction notifications before approving.
4. Enable UPI transaction limits: Use app settings to restrict single-transaction or daily transfer limits.
5. Use app security: Enable biometric lock or app passwords on UPI apps.
6. Beware of urgent calls: Scammers pressure victims; stay calm and confirm details independently.
7. Install updates: Keep your phone’s OS and payment apps updated to block malware.

What to Do If You've Been Targeted

1. Immediately block your UPI payments: Use your bank app or UPI app’s “pause transactions” feature if available.
2. Contact your bank helpline: Report the fraud to your bank at the earliest to flag suspicious transfers.
3. File a complaint: Register the fraud on cybercrime.gov.in and provide all evidence.
4. Call 1930 Helpline: India’s dedicated cybercrime helpline provides expert guidance and escalation.
5. Inform your mobile service provider: To prevent SIM swap fraud, notify your telecom operator if you suspect SIM cloning.
6. Change passwords and enable 2FA: Secure your accounts linked to your bank or email.
7. Keep a record: Maintain transaction screenshots, call logs, and messages as proof to aid investigation.

Frequently Asked Questions

What is the “cooling-off period” RBI suggests for UPI transactions?
The RBI recommends a short waiting period before a UPI or bank transfer is finalized, giving users time to verify or cancel suspicious transactions. This measure aims to reduce instant fraud losses by catching unauthorized transfers early.

Can I get my money back if I fall victim to this UPI scam?
While UPI transactions are generally irreversible once authorized, reporting fraud to your bank immediately and filing a cyber complaint can improve chances of recovery. The faster you act, the better banks and law enforcement can help.

How can I verify if a call or message claiming to be from my bank or RBI is genuine?
Always end the call and contact your bank directly using official numbers or app support. RBI never asks for OTPs or confidential data over calls. Genuine institutions will never pressure you for instant action or sensitive information.

To stay safe from scams like this cooling-off period fraud and other UPI frauds, always verify suspicious messages, calls, and alerts at BharatSecure.app — India’s trusted resource for digital fraud awareness. Stay alert, stay secure!