UPI/Digital Payment Demand (Parcel Drug Scam Variant) — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team ·

Severity: HIGH | View Full Scam Details

Beware the 2026 UPI/Digital Payment Demand Scam in India: The Parcel Drug Variant

A new and alarming fraud called the UPI/Digital Payment Demand (Parcel Drug Scam Variant) is targeting Indian citizens by falsely accusing them of involvement in illegal drug parcels—and demanding instant digital payments.

What Is the UPI/Digital Payment Demand (Parcel Drug Scam Variant)?

This scam is an emerging cybercrime in India, involving fraudsters who cold-call or text unsuspecting victims claiming a parcel containing unlawful drugs has been traced to their address. These callers often impersonate police officers, customs officials, or courier company staff. The goal: to scare victims into making urgent payments through UPI apps, such as Google Pay or PhonePe, to supposedly "avoid arrest" or "settle fines."

People across many states in India have reportedly fallen prey to this scheme, particularly those with limited awareness of digital fraud tactics. This scam exploits the Indian public’s fear of legal trouble and reliance on digital payments, especially UPI, which by 2026 sees tens of millions of transactions daily. According to advisories by the Indian Computer Emergency Response Team (CERT-In) and the Indian Cyber Crime Coordination Centre (I4C), such scams are rising sharply as fraudsters adapt to new social engineering methods.

Although the scam targets anyone with a mobile number linked to UPI, older adults and non-tech-savvy users seem to be the preferred victims, as they may panic and comply with the demands without verifying legitimacy. Authorities like the Reserve Bank of India (RBI) have repeatedly warned users to be cautious of unsolicited calls demanding money or personal details.

How This Scam Works — Step by Step

  1. Initial Contact: The victim receives a call or message from a number claiming to be from police, customs, or a courier service. The caller states a parcel with illegal drugs addressed to the victim was detected.

  2. Fear Tactics: The fraudster uses threatening language about arrest, legal action, heavy fines, or property seizure, creating panic.

  3. Urgent Payment Demand: The "official" states immediate payment of a fine or bribe is necessary to avoid trouble. The victim is told to pay via UPI apps like Google Pay, PhonePe, or Paytm.

  4. Payment Instructions: Instead of any official government wallet or account, victims are repeatedly directed to transfer money to personal bank accounts or wallet IDs controlled by scammers.

  5. Additional Pressure: The caller may threaten to involve higher authorities or claim the victim’s Aadhaar or bank details have been revoked if they don't comply immediately.

  6. Completion and Disappearance: Once the victim transfers the money, the scammers cut contact. Often, victims realize too late that no such parcel or legal issue existed.

Real Warning Signs to Watch For

What Happens to Victims

Victims often face significant financial losses, sometimes running into tens of thousands of INR, as UPI payments are instant and irreversible. Unlike bank account transfers, UPI transactions cannot be recalled once processed unless the receiver agrees. In many cases, victims also experience emotional distress due to fear of false legal troubles and harassment via repeated scam calls.

Moreover, some victims report cascading impacts, such as SIM swap frauds facilitated by scammers who gain partial personal data during calls. This can lead to further unauthorized transactions or identity misuse linked to Aadhaar and bank accounts.

What RBI and CERT-In Say

The Reserve Bank of India, in its advisory on digital payments, stresses that no legitimate authority demands fines or payments through unofficial personal accounts or private wallets. CERT-In and the Indian Cyber Crime Coordination Centre (I4C) have warned of increasing social engineering scams exploiting UPI apps and urged citizens to verify calls by directly contacting official helplines.

Victims are encouraged to report suspected cyber fraud immediately to the national cybercrime helpline at 1930, which operates across India, as well as files complaints at cybercrime.gov.in. RBI also recommends enabling app-based transaction alerts and regularly updating UPI app security settings.

How to Protect Yourself

  1. Never respond or make payments to unsolicited calls alleging legal trouble without verifying independently.
  2. Do not share OTPs, UPI PINs, Aadhaar details, or bank passwords with anyone over the phone.
  3. Confirm any claims by calling official police or courier offices using publicly available contact numbers.
  4. Always pay government fines through official channels or government portals, never to a personal account or UPI ID.
  5. Register your mobile number and Aadhaar with the DND (Do Not Disturb) service to reduce unsolicited calls.
  6. Regularly update and secure UPI apps with strong authentication like biometrics or app-specific PINs.
  7. Report suspicious calls or messages to the 1930 cybercrime helpline immediately.

What to Do If You've Been Targeted

  1. Do not panic; immediately stop any further communication with the caller.
  2. Contact your UPI app’s customer support to block or freeze your payment facility temporarily.
  3. Change your UPI PIN and enable two-factor authentication wherever possible.
  4. Lodge a complaint with local police and file an online cybercrime report at cybercrime.gov.in.
  5. Call the 1930 cybercrime helpline to receive guidance and assist in tracking the fraud.
  6. Inform your bank about the unauthorized transaction to explore any recovery options.
  7. Monitor your bank account, Aadhaar-linked services, and mobile SIM activity for suspicious changes.

Frequently Asked Questions

Q: Can I get my money back if I transferred it to a scammer’s UPI ID?
Recovering UPI payments made to scammers is very difficult, as transactions are instant and irreversible. However, reporting the fraud quickly to your bank and cybercrime authorities may improve the chances of investigation or recovery.

Q: How can I verify if a call about alleged illegal parcels is genuine?
Always hang up and verify using official police or courier company numbers. No legitimate authority will demand immediate payment via personal UPI IDs or threaten arrest over an unsolicited call.

Q: What should I do if I shared my UPI PIN or OTP with a caller?
Immediately change your UPI PIN, inform your bank, and monitor your transactions. Report the incident at the 1930 helpline and file a cybercrime complaint online without delay.

Keep BharatSecure.app bookmarked for updates and tools to verify suspicious messages and calls. If you receive any threatening or suspicious UPI payment demands, report them at 1930 immediately.

Disclaimer: This article describes a pattern of fraud reported in public sources for public-safety awareness. It is not legal, financial, or medical advice. To request correction or removal of any content, write to hello@bharatsecure.app.

Related Scams in Our Database

Verify Any Suspicious Message

Check any suspicious message, link, or call for free at bharatsecure.app.