RBI to safeguard online payments with new measures — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 26, 2026

Severity: MEDIUM | View Full Scam Details

RBI to Safeguard Online Payments with New Measures in 2026: Beware of UPI Fraud Scams in India

Online payment frauds are on the rise in India, with scammers exploiting UPI’s popularity to trick unsuspecting users.

What Is the RBI to Safeguard Online Payments with New Measures Scam?

In 2026, a new wave of scams has surfaced, falsely claiming to be announcements from the Reserve Bank of India (RBI) about enhanced security measures to protect online payments. These scams mainly target UPI users, who form the largest group of digital payment users in India. Since UPI transactions are both fast and easy, scammers see an opportunity to exploit user trust by impersonating RBI or bank officials and promising new safeguards against fraud, but actually stealing sensitive data.

The scam is widespread and particularly prevalent on popular social media platforms in India, such as WhatsApp, Facebook, and Telegram. Fraudsters often spread fake messages, voice calls, or SMS that indicate urgent RBI notifications regarding changes to UPI transaction rules. The goal is to manipulate the victim into sharing UPI PINs, OTPs, or Aadhaar-linked details under the pretense of security verification.

The Indian government agencies, including RBI, CERT-In (Computer Emergency Response Team - India), and the Indian Cyber Crime Coordination Centre (I4C), have issued warnings against such fraudulent communications. RBI’s official statements emphasize that they never seek UPI PINs or OTPs from customers and recommend verifying all messages through official RBI and bank channels.

How This Scam Works — Step by Step

1. Initial Contact: The victim receives a WhatsApp or SMS message, or even a phone call, claiming to be from the “RBI Cybersecurity Cell” or a bank’s fraud department. The message typically warns about recent fraud attempts and introduces ‘new RBI measures’ to safeguard online payments.

2. Building Trust: The scammer may sound professional, use official-sounding language, or share fake RBI logos and links to fake websites that look legitimate. Sometimes, they impersonate bank executives, calling from spoofed numbers appearing as bank helpline lines.

3. Urgency and Fear Tactics: They create pressure by saying the victim’s UPI account is at risk of being frozen or may be blocked unless they verify their details immediately.

4. Data Extraction: The victim is asked to share sensitive information, such as UPI PIN, OTP received via SMS, Aadhaar number, or even screenshots of banking apps.

5. Account Takeover: Using the details shared, scammers quickly perform fraudulent transactions via UPI apps, transferring money to their own accounts. Sometimes, the victim’s SIM card may be targeted through a SIM swap fraud to intercept OTPs.

6. Final Step: After stealing the money, the scammer may block or ignore further communications, leaving the victim helpless.

Real Warning Signs to Watch For

• Messages or calls urgently demanding your UPI PIN, OTP, or Aadhaar details — RBI or banks never ask for these.
• Unsolicited messages claiming to be from the RBI or your bank about new “safeguard measures” with links to unknown websites.
• Requests to install apps or click on links promoting RBI’s “new secure UPI app” or “UPI verification.”
• Spoofed phone numbers resembling official bank helplines.
• Pressure tactics warning your account will be frozen or blocked immediately.
• Poor grammar or spelling mistakes in official-sounding messages.
• Requests to share screenshots or forward messages to friends or groups.

What Happens to Victims

Victims often suffer significant financial loss due to unauthorized UPI transactions. Unlike traditional bank transfers, UPI payments cannot be reversed once successful, which means recovering money is difficult. Many victims find that their linked bank accounts or wallets are drained within minutes.

Beyond financial harm, there is emotional trauma — victims experience stress, anxiety, and mistrust of digital platforms. In some cases, Aadhaar details shared can lead to further identity theft, complicating credit and loan applications or opening fraudulent accounts. If SIM swap fraud is involved, victims may lose control of their mobile numbers, impacting other services linked to their phones.

What RBI and CERT-In Say

RBI and CERT-In have repeatedly issued advisories warning users to be vigilant against frauds impersonating official agencies. RBI clearly states it never asks for UPI PINs or OTPs and does not send messages asking for personal banking information.

The Indian Cyber Crime Coordination Centre (I4C) under the Ministry of Home Affairs facilitates the tracking and reporting of such scams, while CERT-In offers cybersecurity awareness and incident response.

If you receive suspicious calls or messages, contact the official RBI helpline at 1800-120-1465 or the National Cyber Crime Helpline at 1930 for immediate support.

How to Protect Yourself

1. Never share your UPI PIN or OTP with anyone — not even bank officials or RBI representatives.
2. Verify messages independently by calling your bank’s official number or visiting the official RBI website.
3. Ignore links in unsolicited messages; instead, download apps only from the Google Play Store or Apple App Store.
4. Enable two-factor authentication on your bank and UPI apps.
5. Keep your phone’s OS and apps updated to benefit from the latest security patches.
6. Use strong passwords and change them regularly, especially on your mobile banking and payment apps.
7. Report suspicious messages or calls immediately to your bank, RBI helpline, or cybercrime.gov.in.

What to Do If You’ve Been Targeted

If you suspect you’ve fallen victim to this scam, act fast:

1. Contact your bank immediately to block or freeze your UPI transactions.
2. Report the fraud to the National Cyber Crime Helpline at 1930 and file a complaint on cybercrime.gov.in.
3. Inform your mobile service provider if you notice SIM swap or suspicious changes.
4. Change your UPI PIN and app passwords without delay.
5. Monitor your bank account and credit history regularly for any unauthorized activity.
6. Contact RBI’s helpline (1800-120-1465) for further assistance.
7. Preserve all communication and transaction details to aid investigations.

Frequently Asked Questions

Q: Can RBI ever ask for my UPI PIN or OTP for security purposes?
A: No. RBI and banks strictly prohibit asking for your UPI PIN or OTP over calls, SMS, or WhatsApp. Sharing these details means your account can be compromised.

Q: What should I do if I accidentally shared my UPI PIN with a scammer?
A: Immediately contact your bank to block all transactions, change your UPI PIN, and report the incident to cybercrime authorities at 1930 for prompt action.

Q: How does RBI’s new safeguard measure help if scammers are already tricking users?
A: RBI’s new measures mainly focus on backend transaction monitoring, but user vigilance is crucial. Official advisories remind users never to share sensitive details and to authenticate messages and calls themselves.

If you receive any suspicious messages or calls claiming to be from RBI or your bank, don’t take chances — verify them with us at BharatSecure.app before acting. Stay informed, stay safe!