RBI suggests cooling-off period for UPI, bank transfers — what it means for you — How to Identify & Stay Safe

Severity: MEDIUM | View Full Scam Details

RBI Suggests Cooling-Off Period for UPI, Bank Transfers in 2026: What This Scam Means for Indian Users

A new scam related to RBI’s proposed "cooling-off period" for UPI and bank transfers is threatening to trick thousands of Indians in 2026, exposing them to fraud through fake calls and messages.

What Is the RBI Suggests Cooling-Off Period for UPI, Bank Transfers — What It Means for You?

In early 2026, the Reserve Bank of India (RBI) suggested implementing a "cooling-off period" on Unified Payments Interface (UPI) and bank transfers to curb impulsive transactions and prevent fraud. This cooling-off period is meant as a pause window between initiating and completing high-value transactions. However, cybercriminals have quickly exploited this news to launch a new wave of scams targeting Indian UPI users.

Scammers are impersonating RBI officials or bank customer service agents, contacting victims through WhatsApp, Instagram, and phone calls, claiming that this new cooling-off period requires users to “verify” or “activate” their accounts to avoid transaction blocks. They often target vulnerable groups such as elderly users or less tech-savvy individuals, using their trust in RBI and banks to extract sensitive information.

The scam has quickly spread nationwide, with reports from CERT-In and the Indian Cyber Crime Coordination Centre (I4C) warning users to stay alert. While the scam is medium severity (risk score 5/10), it poses a real threat because many people don’t know how the official cooling-off period works and believe scammers’ false claims.

How This Scam Works — Step by Step

1. Initial Contact: You receive a WhatsApp message, Instagram DM, or phone call from someone claiming to be an RBI or bank official. This message often references the new RBI cooling-off period on UPI or IMPS bank transfers, suggesting urgent compliance.

2. Fake Verification Request: The scammer tells you that you must “verify” your UPI ID, Aadhaar, or bank account by clicking a link or sharing an OTP (one-time password) sent to your phone.

3. OTP and Details Harvesting: When you share this OTP or any bank-related details, scammers instantly use this info to authorize fraudulent UPI or bank transfers from your account.

4. Urgency Tactics: They create a sense of urgency ("Your account will be blocked," "You will lose money if you don’t verify now") to pressure victims into acting quickly without thinking.

5. Money Lost: Victims notice unauthorized deductions from their bank accounts, often several thousands of INR, and realize it after the damage is done.

6. No Immediate Help: Due to UPI’s near-instant settlement, reversing transfers is difficult, and victims face delays in recovering money, adding to stress.

Real Warning Signs to Watch For

• Unsolicited messages or calls claiming to be from RBI or your bank about UPI “cooling-off periods.”
• Requests to share OTPs, PINs, or bank account passwords.
• Links directing you to unofficial websites that look like RBI or bank portals.
• Pressure to act immediately or threats that your account will be blocked.
• Misspellings or grammatical errors in messages supposedly from RBI or banks.
• Calls from unknown numbers with no way to verify their identity.
• Requests to download apps or software as part of “verification” for UPI transactions.

What Happens to Victims

Victims of this scam often suffer financial losses ranging from a few thousand to lakhs of INR. Because UPI transactions are instant and irreversible, money stolen this way is very hard to recover. Besides losing money, victims also face emotional distress and anxiety over potential misuse of their Aadhaar-linked bank accounts or SIM swaps that let fraudsters bypass OTPs later.

The scam also undermines trust in India’s digital payment systems, making many hesitant to use UPI or digital banking for important transactions. Victims may have to file lengthy complaints with their banks and cybercrime authorities, and some even face identity theft or fraudulent loans taken in their names.

What RBI and CERT-In Say

The RBI has clarified that the proposed cooling-off period is still under discussion and has not yet been implemented. It has not authorized any calls or messages asking users to verify details urgently. The RBI helpline for fraud cases is 1800-112-565, and users should report suspicious interactions immediately.

CERT-In and I4C advise users not to share OTPs or personal information on calls or messages and to use only the official bank apps or UPI platforms for transactions. They recommend immediate reporting of any fraud to cybercrime.gov.in or the 1930 Indian Cyber Crime Helpline.

How to Protect Yourself

1. Ignore Unsolicited RBI or Bank Calls: Never trust unexpected calls or messages asking for personal or banking details.
2. Never Share OTPs or PINs: One-time passwords and PINs are secret. Banks or RBI never ask for them via calls or texts.
3. Verify Through Official Channels: Confirm any updates about UPI or banking policies only through RBI’s official website or your bank’s official app.
4. Avoid Clicking Unknown Links: Do not open links sent via WhatsApp or Instagram unless you are sure of their authenticity.
5. Enable UPI Transaction Alerts: Activate SMS or app notifications for every transaction to catch unauthorized transfers early.
6. Set UPI Transaction Limits: Keep daily transfer limits low to minimize losses if fraud occurs.
7. Update Your Phone Security: Use screen locks and keep your phone’s operating system updated to avoid spyware or SIM swaps.

What to Do If You've Been Targeted

1. Immediately Contact Your Bank: Inform your bank’s customer support about the unauthorized UPI/bank transfers and request a freeze on your accounts.
2. Change All Passwords and PINs: Update UPI PINs and passwords on your banking and payment apps.
3. Report the Incident: File a complaint at cybercrime.gov.in and call the 1930 Indian Cyber Crime Helpline.
4. Register with RBI and CERT-In: Inform RBI through their dedicated fraud helpline (1800-112-565) and report to CERT-In.
5. Alert Your Mobile Operator: If you suspect SIM swap, contact your mobile service provider immediately.
6. Document Everything: Keep all screenshots, call records, and messages for evidence when reporting to authorities.

Frequently Asked Questions

Q: Is RBI currently enforcing any cooling-off period on UPI transactions?
A: No. As of 2026, the RBI has only proposed this change and has not implemented it yet. Official notifications will come through proper RBI and bank channels only.

Q: Can I get my money back if I fall victim to this scam?
A: UPI transactions are mostly irreversible. However, banks may help recover losses if reported quickly. Immediate reporting and cooperation are crucial.

Q: How do I know if a message or call about the cooling-off period is genuine?
A: Genuine communication from RBI or banks will never ask for OTPs or passwords. Always verify updates directly on official websites or trusted apps.

If you receive messages or calls claiming to be from RBI or banks about UPI or bank transfers that seem suspicious, do not hesitate to verify them at BharatSecure.app — India’s trusted platform for scam alerts and digital fraud prevention. Stay alert, stay safe!