RBI suggests cooling-off period for UPI, bank transfers — what it means for you — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 25, 2026

Severity: MEDIUM | View Full Scam Details

RBI Suggests Cooling-Off Period for UPI and Bank Transfers in 2026 — What It Means for Indian Users Facing UPI Fraud

UPI fraud is rising in India, and the RBI’s new cooling-off period proposal aims to protect you from rushed scams involving instant bank transfers.

What Is the RBI Suggests Cooling-Off Period for UPI, Bank Transfers — What It Means for You?

In 2026, the Reserve Bank of India (RBI) has recommended introducing a cooling-off period for Unified Payments Interface (UPI) and bank transfers. This means a brief waiting time before funds move from your bank account to the recipient's, allowing users to double-check transfer details and catch potential scams before money disappears.

India’s UPI ecosystem processes billions of transactions monthly, making it an easy target for fraudsters. Scammers exploit the immediate transfer nature of UPI and instant bank payments, often pressuring victims to act quickly without second thoughts. The RBI’s advisory, backed by CERT-In (Indian Computer Emergency Response Team) and the Ministry of Home Affairs’ I4C (Indian Cyber Crime Coordination Centre), aims to curb losses from rising social engineering attacks and phishing scams that manipulate emotions to rush money transfers.

This scam particularly affects everyday Indians who use WhatsApp, Facebook, and similar platforms, where fraudsters impersonate friends, bank officials, or trusted businesses. The quick transfer of funds makes reversing fraudulent transactions difficult, as banks currently process UPI payments almost instantly with very limited recourse. The cooling-off period is seen as a protective measure to reduce impulsive transfers driven by scam pressure.

How This Scam Works — Step by Step

1. Initial Contact: The scammer sends a WhatsApp or social media message posing as a trusted contact, bank official, government employee, or online seller. Common tactics include urgent requests for money related to “emergencies” or “blocked accounts.”

2. Emotional Manipulation: The victim is pressured with urgent language (“Please help, my account is frozen!”, “I’m in a financial crisis!”, or “Your Aadhaar is at risk!”), making them feel obligated and rushed.

3. Fake Verification or Link Sharing: The scammer may send fake bank URLs, phishing links, or ask victims to share OTPs or UPI PINs under the guise of verification.

4. Request for UPI or Bank Transfer: Once trust is gained, the scammer asks the victim to quickly transfer money via UPI or immediate bank transfers, exploiting the rapid transaction system.

5. Money Disappears Instantly: The victim sends the money in haste; the scammer immediately transfers funds out, often using multiple accounts or wallet conversions, making recovery difficult.

6. Realization and Loss: Victims only realize they’ve been scammed after the funds have cleared. The instant nature of current UPI systems means banks struggle to reverse these transactions.

Real Warning Signs to Watch For

• Urgent or emotional pressure to send money immediately. Scammers want you to act without thinking.
• Unsolicited messages or calls claiming to be from your bank or government agencies.
• Requests to share OTPs, UPI PINs, or passwords. No genuine bank will ask for this.
• Links directing you to websites that don’t start with your bank’s official URL or have spelling errors.
• Requests to transfer money for “verification” or “security purposes.”
• Impersonation of friends or family through hacked WhatsApp accounts asking for urgent loans.
• Poor grammar, odd language, or unfamiliar phone numbers in messages.

What Happens to Victims

Victims often lose money instantly due to the lack of a refund window for UPI instant transfers. Emotional distress is significant — many suffer anxiety over stolen savings, especially among low-income families relying on small transactions. Fraud can also lead to unauthorized SIM swap fraud, Aadhaar misuse, or identity theft, affecting victims’ financial credibility and credit history.

Because of the instantaneous nature of UPI and NEFT transfers, victims in India face difficulties retrieving lost funds. While the RBI and banks encourage prompt reporting, many victims don’t come forward until it’s too late. The current lack of a mandatory mandatory cooling-off or verification period exacerbates these challenges.

What RBI and CERT-In Say

The RBI has issued circulars urging banks to educate customers on UPI fraud and encouraged multi-factor authentication steps. The RBI’s latest suggestion to introduce a cooling-off period aims at giving users a buffer time to verify transfers, reducing scam success rates.

CERT-In regularly publishes advisories on social engineering and phishing scams prevalent in India, urging users not to share OTPs or PINs and to verify payment details. The Ministry of Home Affairs’ I4C also supports awareness campaigns and has a cybercrime helpline (1930) for victims.

Banks maintain helplines such as the RBI Banking Ombudsman service and encourage victims to report fraudulent transactions immediately to freeze affected accounts and assist in investigation.

How to Protect Yourself

1. Always double-check payment details before confirming any UPI or bank transfer.
2. Never share OTPs, UPI PINs, or passwords with anyone—even if they claim to be a bank employee.
3. Be suspicious of urgent messages asking for immediate money transfers, especially via WhatsApp or social media.
4. Use official bank apps and websites only—avoid clicking unknown links or downloading attachments.
5. Enable biometric or two-factor authentication on your UPI app for an extra layer of security.
6. Regularly update your mobile phone’s software and UPI app to patch vulnerabilities.
7. Report any suspicious messages or transactions immediately to your bank and the 1930 cybercrime helpline.

What to Do If You’ve Been Targeted

• Immediately contact your bank’s customer care to report the transaction and request a block on your account if needed.
• File a complaint online at the National Cyber Crime Reporting Portal (cybercrime.gov.in).
• Call the 1930 cybercrime helpline to notify authorities and get guidance on next steps.
• Inform your mobile network provider if you suspect SIM swap or Aadhaar misuse to stop further fraud attempts.
• Keep records of all messages, transaction IDs, and communications for evidence.

The sooner you act, the better the chances of recovering funds or preventing further losses.

Frequently Asked Questions

Q: What exactly is this RBI cooling-off period for UPI transfers?
A: It is a proposed short waiting time before a UPI or bank transfer completes, allowing users to verify payment details and cancel if something seems suspicious, helping reduce scam losses.

Q: Can I reverse a UPI payment if I realize I was scammed?
A: Currently, most UPI payments are instant and irrevocable, making reversal difficult. Reporting the fraud immediately to your bank and cybercrime authorities is critical to increase recovery chances.

Q: How do scammers typically get my bank or UPI details?
A: They use social engineering, phishing links, fake apps, or hacked social media accounts to trick you into sharing OTPs, PINs, or clicking fraudulent payment links.

Stay safe and never rush your UPI or bank transfers. When in doubt, always verify suspicious messages and transactions at BharatSecure.app — your trusted partner in stopping digital fraud in India.