RBI suggests cooling-off period for UPI and bank transfers — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 18, 2026

Severity: MEDIUM | View Full Scam Details

RBI Suggests Cooling-Off Period for UPI and Bank Transfers in 2026: Crucial Scam Alert for India

UPI and bank transfer frauds continue to rise in India, prompting the RBI to suggest a cooling-off period to curb financial losses.

What Is the RBI Suggests Cooling-Off Period for UPI and Bank Transfers?

In 2026, the Reserve Bank of India (RBI) has proposed introducing a mandatory cooling-off period for Unified Payments Interface (UPI) and bank transfers following a series of scams exploiting instantaneous money movement. This suggestion comes as a medium-severity scam warning, rated 5/10 in risk, but with the potential to cause significant financial damage to everyday citizens.

This scam exploits the speed and ease of UPI and instant bank transfers, targeting a wide range of people across India, especially those less familiar with digital transactions, such as senior citizens and small business owners. Fraudsters use social engineering tactics combined with fake emergency stories or false investment opportunities to trick victims into sending money via UPI or NEFT without having sufficient time to reconsider.

The Indian government, through agencies like the Indian Computer Emergency Response Team (CERT-In) and the Ministry of Home Affairs’ Indian Cyber Crime Coordination Centre (I4C), has issued advisories recommending public awareness on the risks of instant transfers. The RBI’s cooling-off period suggestion reflects a growing need to introduce a “pause button” that allows users to verify transactions before funds leave their accounts, thus reducing fraud incidents.

How This Scam Works — Step by Step

1. Initial Contact: The fraudster contacts the victim via WhatsApp, phone call, or SMS, pretending to be a bank official, government agent, or known contact.
2. Creating Urgency: They fabricate an urgent situation, such as a fake tax notice, a problem with the victim’s Aadhaar linkage, or an immediate investment opportunity promising high returns.
3. Request for Transfer: The fraudster insists the victim immediately transfer money via UPI or bank transfer to a provided account to “resolve” the problem or secure the offer.
4. Instant Transfer Made: Given the UPI system’s real-time nature, once the victim sends money, the fraudster quickly withdraws or moves the funds.
5. Blocking Communication: After gaining the money, fraudsters block the victim’s number or delete the WhatsApp account, making reversal and recovery extremely difficult.
6. No Cooling-Off Period Exploited: Because there is currently no mandated delay, victims lose their money instantly, with limited time to review or cancel transactions.

Real Warning Signs to Watch For

• Unsolicited calls or messages demanding immediate transfer via UPI or bank transfer
• Requests to share UPI PIN, Aadhaar details, or OTPs over phone or chat
• Sense of urgency created, pressuring for “quick action” without time to think
• Unknown or new payment requests from unusual virtual payment addresses (VPAs)
• Offers that seem “too good to be true,” like high returns on investments
• Verification links that lead to fake RBI or bank portal websites
• Communication using official-sounding titles but from personal or non-official numbers

What Happens to Victims

Victims of this scam often experience immediate financial loss, with amounts ranging from a few hundred rupees to lakhs. Since UPI and bank transfers are instant and authorized by the user, banks rarely guarantee refunds unless the victim can prove coercion or fraud quickly. Many victims find their accounts emptied before they realize what happened.

Emotionally, victims feel betrayed and anxious, especially since scammers sometimes misuse stolen Aadhaar info or conduct SIM swap frauds to access victims' other accounts. This ripple effect can cause lockdown of digital wallets, delayed salary credits, or even issues with recurring bill payments. The psychological strain in India can be profound, with families depending on the stolen money for daily expenses.

What RBI and CERT-In Say

The RBI has repeatedly warned users to verify payment requests independently and avoid sharing UPI PINs or OTPs. In recent advisories, RBI highlighted the dangers of fraudsters exploiting the real-time settlement feature of UPI and urged users to confirm beneficiaries’ identity before transferring money.

CERT-In emphasizes the importance of digital hygiene, awareness about phishing messages, and reporting financial fraud promptly to law enforcement. The Indian Cyber Crime Coordination Centre (I4C) operates the 1930 cybercrime helpline for timely complaint registration.

RBI and CERT-In encourage users to keep track of their bank statements regularly and report suspicious transaction alerts immediately to their bank’s grievance redressal system.

How to Protect Yourself

1. Never share your UPI PIN, OTP, Aadhaar, or bank details with anyone, even if they claim to be officials.
2. Always double-check the virtual payment address (VPA) before transferring money.
3. Avoid clicking on suspicious links sent via SMS or WhatsApp related to payments or bank alerts.
4. Insist on verifying the identity of callers requesting urgent money transfers through official channels.
5. Check transaction details carefully before confirming, and if unsure, wait at least 15 minutes before transferring — this practice mimics the suggested cooling-off period.
6. Register your mobile number with your bank to receive instant transaction alerts.
7. Report suspected fraud immediately to your bank and cybercrime helpline number 1930.

What to Do If You've Been Targeted

If you believe you’ve been scammed via UPI or bank transfer:

1. Immediately contact your bank to block your UPI ID or linked accounts to prevent further transactions.
2. File a complaint online at cybercrime.gov.in explaining the scam details.
3. Call the 1930 national cybercrime helpline for guidance and registration of FIR.
4. Inform your mobile service provider if you suspect SIM swap fraud to block your number.
5. Report the fraud to the RBI helpline or your bank’s customer service for possible transaction reversal requests.
6. Keep all records of communication (messages, call logs, transaction receipts) to support your complaint.

Frequently Asked Questions

Q1: Can I get my money back if I transferred via UPI to a scammer?
Unfortunately, UPI payments are instant and usually non-reversible. However, banks may initiate investigations and reverse transactions in cases of proven fraud if reported quickly.

Q2: Does the RBI’s suggested cooling-off period mean all transfers will be delayed in 2026?
The RBI’s suggestion aims to introduce a pause that allows users to verify transactions, but the exact implementation timeframe and details are still under consideration.

Q3: How can I differentiate between official bank messages and scam messages on WhatsApp?
Official messages come from verified numbers or bank apps, never ask for your PIN or OTP, and typically don’t create urgent pressure for transfers. Always cross-check with your official bank communication channels.

If you receive suspicious messages or calls related to UPI or bank transfers, don’t rush. Verify them first at BharatSecure.app — India’s trusted platform fighting digital fraud every day. Stay alert, stay safe!