UPI Payment Voice-Cloning Fraud — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 29, 2026

Severity: HIGH | View Full Scam Details

UPI Payment Voice-Cloning Fraud in India 2026: What You Must Know to Stay Safe

A rising cybercrime in 2026 involves fraudsters using voice-cloning technology to trick people into authorizing UPI payments, putting Indian users at high risk of financial loss.

What Is the UPI Payment Voice-Cloning Fraud?

The UPI Payment Voice-Cloning Fraud is a sophisticated scam targeting UPI users across India by leveraging artificial intelligence to mimic a victim’s or their known contacts’ voice. Fraudsters record or obtain voice samples through WhatsApp or phone calls, then create a synthetic voice that sounds remarkably like the victim or their trusted family member. Using this cloned voice, the fraudsters call victims’ banks, payment apps, or even the victims themselves, pretending to be the account holder or a close relative urgently requesting UPI transaction approvals.

This scam particularly targets people who frequently use UPI apps like Google Pay, PhonePe, or Paytm, and often rely on voice authentication or confirm transactions verbally. Its reach is widening in urban and semi-urban India due to the easy availability of voice-cloning tools and growing familiarity with UPI payments. According to complaints reported to police and cybercrime cells, such fraud cases have surged since early 2026, prompting alerts from RBI and CERT-In to warn users against social engineering tactics and the misuse of biometric data like voiceprints.

How This Scam Works — Step by Step

1. Harvesting Voice Samples: Scammers initiate contact by sending WhatsApp messages or making casual phone calls to record the victim’s voice or their close contact’s voice. This might be done under the guise of surveys, customer support, or friendly chats.

2. Creating the Voice Clone: Using publicly available voice-cloning software, they generate an AI-based synthetic voice track that replicates the target’s tone, pitch, and speech patterns.

3. The Fake Call: The scammer then impersonates the victim or a trusted family member, calling the victim or bank officials, claiming there is an urgent UPI transaction issue or a new payment to be verified.

4. Requesting OTP or UPI PIN: The fraudster prompts the victim to share an OTP (One-Time Password) received on their phone or to verbally confirm a UPI transaction, sometimes using fear tactics, like claiming the account will be frozen or money will be lost if not approved immediately.

5. Authorizing Fraudulent Payment: Using the shared OTP or voice confirmation, the fraudster completes unauthorized UPI transactions, transferring money to accounts that are difficult to trace.

6. Cover-Up: The scammer quickly cuts off communication, making it hard for the victim to reverse the transaction or identify the fraud source.

Real Warning Signs to Watch For

• Calls asking for your UPI PIN, OTP, or voice confirmation of transactions.
• Unknown numbers urgently requesting immediate payment approvals.
• Voices that sound slightly off or robotic, despite sounding familiar.
• Pressure tactics claiming account suspension or urgency to act.
• Unexpected WhatsApp messages from contacts asking for your voice note.
• Requests to share screen or phone details during a call.
• Messages or calls initiating new, unsolicited payments or changes on your UPI app.

What Happens to Victims

Victims often suffer immediate financial loss as UPI transactions are near-instantaneous and hard to reverse. In India, while RBI guidelines provide some consumer protection, the reversal process can be lengthy and complicated, especially when the fraud involves third-party authorization through cloned voices. Victims report stress, loss of trust in digital payments, and sometimes feel helpless as scammers exploit Aadhaar-linked KYC data or hijack SIM cards to facilitate the fraud.

Beyond money loss, victims face emotional distress and anxiety over data privacy breaches. In some cases, the SIM swap technique is combined with voice cloning to intercept OTPs, making it almost impossible for victims to secure their accounts once compromised.

What RBI and CERT-In Say

The Reserve Bank of India (RBI) has cautioned users through circulars and press releases to be wary of social engineering frauds involving OTP sharing and voice verification. RBI emphasizes never to share UPI PINs or OTPs with anyone and to treat all unsolicited calls with skepticism.

CERT-In (Indian Computer Emergency Response Team) has issued alerts highlighting risks related to voice cloning and AI-based fraud methods. The agency advises users to report suspicious calls immediately and to update their app versions regularly to benefit from enhanced security features.

If you encounter such fraud, you can report it to the 1930 cybercrime helpline or lodge a complaint on cybercrime.gov.in. RBI’s banking grievance redressal helpline is also available to assist.

How to Protect Yourself

1. Never share your UPI PIN or OTP with anyone, even if the caller sounds familiar.
2. Ignore calls asking for voice confirmation of payments or account details.
3. Verify urgent requests independently by calling back your bank or known contacts directly.
4. Use app-based biometric authentication (fingerprint or face ID) instead of voice where possible.
5. Set up multi-factor authentication (MFA) and enable transaction alerts on your phone.
6. Be cautious about sending voice notes on WhatsApp or social media, especially to unknown contacts.
7. Report suspicious calls or messages immediately to your bank and the 1930 cybercrime helpline.

What to Do If You've Been Targeted

1. Immediately block the UPI app and inform your bank to freeze your accounts and prevent further unauthorized transactions.
2. File a complaint with your bank’s grievance cell seeking transaction reversal.
3. Report the fraud to the 1930 cybercrime helpline and file a complaint at cybercrime.gov.in.
4. Change all related passwords and UPI PINs from a secure device.
5. Inform your mobile operator if you suspect SIM swap fraud to regain control of your number.
6. Keep all records of calls, messages, and transaction details to support investigation efforts.

Frequently Asked Questions

Q: Can scammers really clone my voice to steal money via UPI?
Yes. With advances in AI, scammers can synthesize voices from short recordings and use these to impersonate you or a trusted contact, pressuring you or bank officials to approve UPI payments unlawfully.

Q: If I share my OTP during a call, can my bank reverse the transaction?
Reversals depend on the bank’s policies and details of the transaction. However, once money moves via UPI, it is usually difficult to retrieve. Reporting quickly improves chances of mitigation.

Q: How can I be sure a call is genuinely from my bank?
Banks never ask for your UPI PIN or OTP over phone. If a call demands such details urgently or uses pressure tactics, it’s likely fraudulent.

For any suspicious messages or calls related to UPI payments, always verify first at BharatSecure.app and report fraud to the 1930 cybercrime helpline without delay.

Disclaimer: This article describes a pattern of fraud reported in public sources for public-safety awareness. It is not legal, financial, or medical advice. To request correction or removal of any content, write to hello@bharatsecure.app.