RBI Suggests Cooling-Off Period for UPI Transfers — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 26, 2026

Severity: MEDIUM | View Full Scam Details

RBI Suggests Cooling-Off Period for UPI Transfers Scam in India 2026: How to Spot and Stop It

In 2026, digital payment fraud in India is evolving, with scammers exploiting UPI transfers by pushing for quick payments — now the RBI suggests a cooling-off period to tackle this rising threat.

What Is the RBI Suggests Cooling-Off Period for UPI Transfers?

India’s Unified Payments Interface (UPI) has revolutionized the way millions transact daily, with over 10 billion transactions monthly. However, this success has also attracted scammers who misuse the platform’s speed and trust to trick users into making fraudulent transfers. Recently, reports and advisories from the Reserve Bank of India (RBI) and cybersecurity agencies like CERT-In and the Indian Cyber Crime Coordination Centre (I4C) have highlighted a new scam trend that exploits instant UPI payments.

The scam involves fraudsters urging victims to make UPI transfers immediately without taking time to verify the request’s authenticity. Victims often fall prey due to the pressure of urgency, blind trust in UPI’s instant transfer feature, and effective social engineering tactics. To address this, RBI has suggested introducing a "cooling-off period" — a short delay before UPI transactions get processed. This pause aims to give users time to reconsider sudden payment requests, reducing impulsive transfers that benefit scammers.

This scam primarily targets everyday Indians, ranging from young professionals transferring money via WhatsApp to older adults unfamiliar with digital payment safety. It is widespread across urban, semi-urban, and rural areas where UPI usage has exploded. CERT-In and I4C continue to monitor such cases and urge cautious use of digital payments, stressing the need for awareness about scams linked to fast UPI payments.

How This Scam Works — Step by Step

1. Initial Contact Via WhatsApp or Call: The scammer contacts the victim, usually posing as a bank official, government employee, or UPI customer care representative. Sometimes, messages about lottery winnings or discounts lure the victim’s attention.

2. Creating a Sense of Urgency: The scammer insists the victim must immediately verify their UPI account or make a UPI transfer to “secure” a refund, prize, or resolve a fake issue like “account blockage.” They claim delays could cause the victim to lose money or privileges.

3. Sharing Fraudulent UPI or QR Codes: The victim is asked to scan a QR code or send money to a UPI ID controlled by the scammer. Often they send fake payment links mimicking popular UPI apps like Google Pay, PhonePe, or Paytm.

4. Quick Payment Before Verification: Trusting the urgency, the victim immediately transfers money using the UPI app. Because of UPI’s usual instantaneous payment mechanism, the scammer receives the funds quickly.

5. Blocking Victim Communication: After the transfer, scammers block the victim’s number or disappear. Victims realize too late that the payment was not legitimate or authorized.

6. Difficulty in Recovery: Victims report fraud to their banks, but because UPI transactions happen in real-time, reversing payments is often difficult unless the bank or payment platform intervenes quickly.

Real Warning Signs to Watch For

• Unsolicited calls or messages claiming bank or govt affiliation, asking for UPI payments immediately.
• Messages insisting on urgent action to “avoid penalties,” “claim prizes,” or “verify accounts.”
• Requests to share OTPs, PINs, or scan QR codes from unknown contacts.
• Fake payment links or UPI IDs that don’t match official bank or app details.
• Pressure to not discuss the matter with family or friends.
• Communication from new or unknown phone numbers not listed on bank websites.
• Offers “too good to be true” like lottery winnings or instant cashback that require advance payments.

What Happens to Victims

Victims often face immediate financial loss because UPI payments cannot be reversed easily once processed. This loss could range from a few hundred rupees to lakhs, depending on how much the scammer extracts. Besides money, victims experience anxiety, guilt, and loss of trust in digital payments, especially when scammers misuse linked Aadhaar or bank details to commit further fraud. Victims may also suffer from SIM swap frauds, where attackers take control of the victim’s mobile number, locking them out of their own accounts. The emotional trauma and legal hassles add to the burden, often discouraging timely reporting and recovery.

What RBI and CERT-In Say

The Reserve Bank of India has repeatedly warned users to verify the authenticity of payment requests before transferring money via UPI. The RBI’s latest suggestion to introduce a cooling-off period for UPI transfers aims to curb impulsive transactions triggered by scams. CERT-In, under the Ministry of Electronics and IT, advises citizens to avoid sharing personal or financial information via phone or WhatsApp and to use official app links only.

If you get suspicious calls, you can contact the RBI helpline at 1800-22-2262 or the 1930 cybercrime helpline. Both agencies emphasize the importance of vigilance and encourage users to report suspicious activities immediately.

How to Protect Yourself

1. Never transfer money urgently without verifying the sender’s identity independently.
2. Do not share OTPs, PINs, or passwords with anyone, even if they claim to be bank staff.
3. Avoid clicking on payment links or scanning QR codes from unknown sources.
4. Use official UPI apps downloaded from trusted app stores.
5. Enable UPI transaction limits on your app and use biometric locks.
6. Regularly monitor bank and UPI transaction statements for unauthorized payments.
7. Inform friends and family about such scams to build collective awareness.

What to Do If You’ve Been Targeted

1. Immediately contact your bank’s customer service and block or freeze your UPI transactions.
2. File a complaint with your bank’s fraud department requesting investigation and reversal.
3. Report the incident to the 1930 National Cyber Crime Reporting Portal or local police cyber cell.
4. Reserve evidence like WhatsApp messages, call logs, and screenshots of suspicious conversations.
5. Inform your mobile service provider if you suspect SIM swap fraud.
6. Follow up regularly with your bank and law enforcement for updates on your case.
7. Reach out to helplines: RBI helpline (1800-22-2262) and CERT-In (1930).

Frequently Asked Questions

Q: Can the RBI’s suggested cooling-off period delay all UPI transactions?
A: No, the cooling-off period is proposed to delay certain transactions flagged as high-risk or suspicious. The goal is to prevent hasty transfers driven by scam pressure without affecting ordinary payments.

Q: What if I realize I was scammed after making a UPI transfer? Can I get my money back?
A: Money sent through UPI transfers is generally final and instant. You must report immediately to your bank and cyber authorities. Sometimes, banks can reverse transactions if action is prompt, but prevention is the best defense.

Q: How can I verify if a UPI ID or payment link is legitimate?
A: Always check that the UPI ID matches official sources from banks or recognized payment platforms. Avoid clicking on unsolicited links—open your UPI app manually and enter payee details yourself.

Stay alert and never rush payments over UPI! Verify any suspicious requests on BharatSecure.app — India’s trusted platform to spot and stop scams before you lose your money.