RBI wants a 1-hour pause on some UPI payments — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 01, 2026

Severity: MEDIUM | View Full Scam Details

Beware! RBI 'UPI Pause' Scam Targeting Indians in 2026

This scam falsely claims the Reserve Bank of India (RBI) is implementing a temporary pause on some UPI payments to steal your financial information.

What Is the RBI wants a 1-hour pause on some UPI payments?

The "RBI wants a 1-hour pause on some UPI payments" scam is a fraudulent scheme where criminals impersonate bank officials or RBI representatives to trick individuals into sharing sensitive financial information under the guise administering a mandatory "pause" on UPI transactions. Scammers will often reach out via WhatsApp or other social media platforms claiming that the RBI is temporarily freezing certain UPI functionalities for security or maintenance reasons. This is a total lie. The RBI never asks for your personal UPI details or Aadhaar number over unofficial channels.

The aim is to create a false sense of urgency, compelling victims to divulge their UPI PIN, Aadhaar details, or other confidential information. These scams often target individuals unfamiliar with RBI's actual procedures or those who panic easily when faced with the prospect of disrupted digital payments. While the exact number of victims is hard to track, the rise of UPI fraud in India documented by the Indian Cybercrime Coordination Centre (I4C) indicate a worrying trend and highlight the need for increased public awareness. The RBI has issued multiple warnings against sharing confidential details.

How This Scam Works — Step by Step

Here’s how these fraudsters typically operate:

1. Initial Contact: The scammer initiates contact, usually through WhatsApp, posing as a customer support executive from a bank, digital wallet (like PhonePe, PayTM, or Google Pay), or even the RBI itself. They may use fake profile pictures and display names to appear legitimate. The initial message often conveys a sense of official authority and may start with a harmless greeting.

2. Creating a False Pretext: The scammer explains that the RBI is implementing a mandatory one-hour pause or temporary suspension of certain UPI payment features due to security updates, server maintenance, or some other fabricated reason. This is entirely false. They might claim that only some UPI IDs are affected, adding a layer of perceived legitimacy.

3. Request for "Verification": To supposedly "verify" if the victim's UPI account is affected by this pause, the scammer requests the victim's UPI ID, Aadhaar number, or other sensitive details. They may attempt to instill confidence by saying that this information is needed only to confirm their identity or register an exemption.

4. Phishing for PIN/OTP: Once they have the victim’s basic details, the scammer might ask for their UPI PIN or request them to approve a transaction notification. They often phrase the request casually, making it seem like a necessary step to prevent their account from being suspended. They are actually trying to steal money from you.

5. Fraudulent Transaction: Once the victim shares the PIN or approves a fraudulent transaction request, the scammer gains access to their UPI account. They then proceed to transfer funds out of the victim’s bank account, making unauthorized purchases, or further exploiting the stolen data for other scams.

Real Warning Signs to Watch For

• Unexpected contact: Be wary of unsolicited messages or calls from unknown numbers claiming to be from RBI, banks, or payment platforms.
• Urgency and scare tactics: Scammers use pressure to prompt quick decisions. Beware of messages claiming your UPI account will be blocked or funds will be frozen if you don't act immediately.
• Requests for sensitive data: RBI or any legitimate bank will never ask for your UPI PIN, OTP, or Aadhaar details via WhatsApp or phone calls.
• Unofficial channels: Communications from legitimate financial institutions are typically done via official channels—secure email or official app notifications, not personal WhatsApp accounts.
• Poor grammar and spelling: Scammers often make grammatical errors or spelling mistakes in their messages.
• Threats or warnings: Any communication that threatens account closure or urgent action should be treated with extreme suspicion.

What Happens to Victims

The financial and emotional impacts can be severe. Victims lose their hard-earned money to these fraudsters, often substantial amounts. The misuse of Aadhaar or other personal details can lead to identity theft and other fraudulent activities. Victims may experience significant stress, anxiety, and feelings of shame and guilt. SIM swaps can amplify the damage, granting fraudsters total control over bank accounts and OTPs. The funds lost are rarely recovered since scammers quickly move the money to untraceable accounts. In some cases, victims also face long legal battles to clear fraudulent charges and recover their identities.

What RBI and CERT-In Say

The RBI frequently warns the public against sharing confidential banking information and has specifically addressed UPI fraud. CERT-In, the Indian Computer Emergency Response Team, also issues advisories and alerts regarding ongoing cyber threats, including UPI-related scams. To report cybercrime or online financial fraud, you can call the national cybercrime helpline 1930 and also file complaints with the RBI Ombudsman. The RBI and CERT-In regularly emphasize that individuals should never share their UPI PINs, OTPs, or other sensitive details with anyone, regardless of their claims or affiliations.

How to Protect Yourself

1. Never share your UPI PIN or OTP: This is your most critical defense. Financial institutions and RBI will never ask for these details.
2. Verify requests through official channels: If you receive a communication purportedly from your bank, contact them directly through official channels (bank's website, official app support, or phone number listed on your bank statement).
3. Enable multi-factor authentication: Use stronger security measures like biometric authentication or two-factor authentication for all your UPI and banking apps.
4. Be cautious of links: Do not click on suspicious links sent via SMS, WhatsApp, or email. These links can redirect you to fake websites designed to steal your information.
5. Keep your apps updated: Ensure your mobile apps (especially banking and UPI apps) are updated to the latest versions to patch security vulnerabilities.
6. Regularly review your bank statements: Monitor your bank accounts and UPI transactions for any unauthorized activity.
7. Register for SMS alerts: Sign up for SMS alerts to get immediate notifications of all transactions so you can quickly identify any fraudulent activity.

What to Do If You've Been Targeted

1. Immediately report to the Cybercrime Helpline (1930): This is the first and most important step. The sooner you report, the better your chances of recovering funds.
2. File a complaint on cybercrime.gov.in: Register a formal complaint on the official website of the National Cybercrime Reporting Portal.
3. Contact your bank/UPI provider: Inform your bank/UPI service provider about unauthorized transactions and request them to block your account temporarily.
4. Change your UPI PIN immediately: Update your UPI PIN on all your apps after reporting the incident.
5. Lodge an FIR (First Information Report) at your local police station: A formal police report is crucial for further investigation and can be necessary for insurance claims.

Frequently Asked Questions

Q: What if the caller sounds very convincing and claims to be from RBI?

A: Scammers can be very persuasive and might use technical jargon to sound legitimate. However, no legitimate RBI representative will ever ask for your UPI PIN or personal banking details over the phone. Always verify through their official channels.

Q: My money was lost through UPI fraud. Is there any chance of getting it back?

A: While it is difficult, reporting the incident immediately via the cybercrime portal (1930) and to your bank significantly increases the chances of tracing and potentially recovering the funds. Delays reduce the likelihood of successful recovery.

Q: Can the scammer access my Aadhaar details if I share my UPI details?

A: While directly sharing your UPI details doesn't automatically give scammers access to your Aadhaar, the information can be used in conjunction with other phishing attempts or identity theft schemes to target you further. Always keep your Aadhaar details confidential and be extremely cautious about sharing personal information online.

Verify suspicious messages and stay safe. Visit BharatSecure.app to learn more about the latest online scams.