UPI Payment Request Voice-Cloning Scam — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 29, 2026

Severity: CRITICAL | View Full Scam Details

UPI Payment Request Voice-Cloning Scam in India 2026: How Fraudsters Exploit Your Trusted Voice

The UPI Payment Request Voice-Cloning Scam is an alarming new cybercrime trend targeting Indian users through WhatsApp and other messaging apps, risking thousands of rupees in fraudulent transactions.

What Is the UPI Payment Request Voice-Cloning Scam?

This scam involves fraudsters using advanced voice-cloning technology to imitate the voice of someone familiar to the victim, such as a family member or close friend. The scammers typically gain access to the victim’s WhatsApp contacts or other social media accounts through phishing or hacking. After infiltrating these accounts, they send urgent voice messages requesting UPI payments or money transfers, leveraging the victim’s trust in the familiar voice.

The target audience is usually people with active UPI-linked bank accounts, smartphone users on platforms like WhatsApp, and those who maintain digital contacts with friends, family, or colleagues. Given the widespread adoption of UPI for instant payments across India, this scam poses a critical threat, especially to less digitally savvy users who may not recognize subtle signs of fraud.

This voice-cloning tactic is reportedly growing in cases reported to cybercrime police across multiple Indian states, highlighting the need for heightened awareness. Institutions like CERT-In and the Indian government’s I4C initiative have issued warnings about phishing, social engineering, and deepfake voices, emphasizing vigilance.

How This Scam Works — Step by Step

1. Account Compromise: The scam usually starts with fraudsters hacking or phishing the victim’s social media or WhatsApp account, often targeting people with weak passwords or by sending malicious links to steal OTPs or login credentials.

2. Accessing Contacts: Once inside, scammers access the victim’s contact list. They identify close relatives or friends who are likely to comply with urgent requests.

3. Voice-Cloning Preparation: Using AI-powered tools, fraudsters create audio clips that mimic the voice of the trusted contact based on available voice samples from social media reels, voice notes, or calls.

4. Sending Voice Messages: The victim receives a WhatsApp voice message or call appearing to be from a familiar person urgently requesting a UPI payment or “help” to resolve an emergency.

5. Creating Urgency and Pressure: The message often includes a convincing story—such as medical emergencies, legal fines, or business troubles—that pressures the victim to act quickly without verifying.

6. Requesting UPI Payment: The scammer sends a UPI payment request or pastes a fraudulent UPI ID (often masked with partial characters) in the chat, asking the victim to transfer a specified sum immediately.

7. Victim Makes Payment: Believing it is a trusted person, the victim completes the transaction using UPI apps like Google Pay, PhonePe, or BHIM.

8. Funds Disappear: Once transferred, the money is routed to fake bank accounts or payments wallets, and recovering the funds becomes difficult.

Real Warning Signs to Watch For

• Receiving a sudden and urgent voice message from a close contact asking for money, especially outside usual communication patterns.
• The voice sounds slightly different, robotic, or unusual in tone or pitch.
• The payment request includes UPI IDs or phone numbers that look suspicious or partially masked (e.g., us**@bank, 98XXXXXX12).
• Requests for fund transfers urgently without any chance to verify via a phone call or in-person.
• Use of pressure tactics like threats or emotional stories to force immediate payment.
• The contact usually communicates via text but suddenly sends voice notes requesting money.
• Unexpected requests for UPI transactions outside normal financial dealings.

What Happens to Victims

Victims of this scam often suffer significant financial loss, sometimes losing tens of thousands of rupees. Because UPI transactions are generally considered final, and reversals are difficult unless the recipient’s account is frozen promptly, many victims are left without recourse to recover their money.

Beyond financial loss, victims may experience emotional distress, including anxiety and a breach of trust with their contacts. In some cases, victims also face exploitation of their personal data such as Aadhaar details when phishing extends beyond the initial fraud, increasing long-term risks like identity theft or SIM swapping.

Victims reported to police also face the hassle of filing FIRs and collaborating with banks and cybercrime cells, which can be time-consuming and stressful.

What RBI and CERT-In Say

The Reserve Bank of India (RBI) has repeatedly advised users to validate any payment requests, especially those involving UPI payments, by directly contacting the requester through alternate channels—such as calling the trusted contact’s verified number.

CERT-In, India’s Computer Emergency Response Team, emphasizes the risks of phishing and impersonation attacks spreading through messaging platforms like WhatsApp. Their advisories recommend vigilance against unsolicited messages asking for money or personal details.

The Ministry of Home Affairs runs the 1930 cybercrime helpline, encouraging victims to report suspected fraud promptly. The Indian Cyber Crime Coordination Centre (I4C) also focuses on spreading awareness about cyber fraud, including emerging AI-based impersonations, stressing the importance of reporting and verification.

How to Protect Yourself

1. Always Verify Requesters: If you receive a voice message asking for urgent money, call the person back on their verified phone number before making any payment.
2. Do Not Click Unknown Links: Avoid clicking suspicious links in WhatsApp or SMS that ask for OTPs or login details.
3. Check UPI IDs Carefully: Verify UPI IDs or bank account details independently, especially if the request is unexpected or unusual.
4. Be Skeptical of Urgency: Fraudsters often create pressure; take your time to verify and do not rush payments.
5. Enable Screen Lock and Two-Factor Authentication: Secure your WhatsApp and social media accounts with strong passwords and two-step verification.
6. Educate Friends and Family: Spread awareness about this scam within your trusted circle.
7. Regularly Monitor Bank Statements and UPI Transactions: Immediately report any unauthorized payment to your bank and UPI app provider.

What to Do If You've Been Targeted

• Immediately Contact Your Bank or UPI Provider: Inform them about the unauthorized transaction to see if the payment can be frozen or reversed.
• File a Complaint at cybercrime.gov.in: Register your complaint with the Indian Cyber Crime Coordination Centre.
• Call the 1930 Cybercrime Helpline: Report the incident and seek guidance on next steps.
• Inform WhatsApp Support: Report the compromised account to WhatsApp for investigation.
• Change All Relevant Passwords and Enable 2FA: Secure your digital accounts to prevent further access.
• Notify Aadhaar Authorities if Required: If you suspect your Aadhaar details were exposed, contact UIDAI for advisories.
• File an FIR with Local Police: Provide all evidence you have, including voice messages and payment screenshots.

Frequently Asked Questions

Q: Can UPI payments made due to voice-cloning scams be reversed?
A: UPI payments are generally final but can sometimes be reversed if reported promptly and if the recipient bank cooperates. Early reporting to your bank and cybercrime authorities increases chances of recovery.

Q: How can I tell if a voice message is AI-cloned or genuine?
A: AI-cloned voices often have unnatural tone, slight robotic sounds, or unusual pauses. If a voice message is out of character or unusually urgent, verify by calling the person directly.

Q: Is WhatsApp safe to use for financial communications?
A: WhatsApp uses end-to-end encryption, but scammers exploit social engineering, not encryption flaws. Always verify payment requests outside the app to be safe.

Verify suspicious messages and calls with BharatSecure.app and report fraud immediately to the 1930 cybercrime helpline.

Disclaimer: This article describes a pattern of fraud reported in public sources for public-safety awareness. It is not legal, financial, or medical advice. To request correction or removal of any content, write to hello@bharatsecure.app.