PhonePe cashback scam fake link June 2026 — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated Oct 16, 2026

Severity: Medium | View Full Scam Details

# PhonePe Cashback Scam Fake Link June 2026 — How to Spot & Avoid It

A new wave of phishing scams is targeting PhonePe users with fake cashback offers via malicious links, designed to steal UPI credentials and drain bank accounts. Here’s what every Indian digital payment user must know.

## What Is This and Why Should Indians Be Concerned?

Cybercriminals are exploiting PhonePe’s popularity by sending fraudulent messages (SMS/WhatsApp) or emails promising "exclusive cashback" or "UPI reward." These fake offers surged in mid-2024, with the Indian Cyber Crime Coordination Centre (I4C) reporting a 63% rise in UPI-linked fraud cases year-on-year. 

The scam specifically targets:
- **UPI users** who regularly transact via PhonePe  
- **WhatsApp/SMS recipients** with messages mimicking PhonePe’s branding  
- **Time-sensitive lures** like "Claim before June 30" to create urgency  

RBI’s 2024 guidelines warn that "no legitimate financial service will ask you to share OTPs, UPI PINs, or click on links to claim rewards."

## How It Works — Step by Step

1. **The Bait**: You receive a message (often from 91XXXXXX98) or WhatsApp forward:  
   *"Congrats! You’ve won ₹1,500 PhonePe cashback. Claim now: phoneperewards[.]in/June26"* (fake link given as example)

2. **The Fake Page**: Clicking the link opens a cloned PhonePe login page with identical logos/colors, asking for:  
   - Mobile number linked to UPI  
   - "Verification OTP" (actually a UPI collect request)  
   - UPI PIN (to "process cashback")

3. **The Theft**: Scammers use these details to:  
   - Set up auto-debit mandates via UPI  
   - Transfer money via UPI collect requests approved by the victim  
   - Access linked bank accounts using stolen credentials  

## Real Warning Signs to Watch For

- **Misspelled URLs**: Fake links like "phonpe-offer[.]com" or "phonepe-rewards[.]in" (PhonePe’s official domain is phonepe.com)
- **UPI PIN requests**: Legitimate cashbacks NEVER require your UPI PIN or OTP  
- **Grammatical errors**: Messages with phrases like "kindly update UPI PIN for cashback"  
- **Unverified senders**: Messages from personal numbers (+91 98XXXXXX12) instead of official SMS channels  
- **Too-good-to-be-true offers**: "₹2,000 cashback for your last transaction" (real cashbacks are typically ₹50–200)  

## What RBI, CERT-In, or I4C Say

- **RBI Advisory (April 2024)**: Mandates that all UPI apps must display warnings against sharing PINs/OTPs.  
- **CERT-In alert (IN-CERT-2024-456)**: Warns of "increased phishing attacks impersonating payment apps."  
- **Cyber Helpline 1930**: Over 2,300 cases related to fake UPI rewards were reported in Q1 2024.  

## How to Protect Yourself

1. **Never click links in unsolicited messages** – even if they appear to be from contacts.  
2. **Verify cashbacks only within the PhonePe app** – official offers appear in the "Offers" tab.  
3. **Check sender details**: PhonePe’s official SMS come from DM-PHONEPE or similar verified headers.  
4. **Enable UPI transaction alerts** – set SMS/email alerts for all transactions above ₹1.  
5. **Use BharatSecure’s link scanner** (free at bharatsecure.app) to check suspicious URLs.  

## What to Do If You’ve Already Been Affected

1. **Immediately call 1930** (National Cyber Helpline) or file a report at [cybercrime.gov.in](https://cybercrime.gov.in).  
2. **Freeze UPI** – Contact your bank to block UPI via net banking or customer care.  
3. **File an FIR** under Section 66D of the IT Act (impersonation using computer resources).  
4. **Notify PhonePe** via in-app support – they can blacklist fraudulent merchant handles.  

## Frequently Asked Questions

**Q: How do I check if a PhonePe cashback offer is real?**  
A: Genuine offers ONLY appear in your PhonePe app’s "Offers" section. Never trust external links, even if forwarded by contacts.  

**Q: I entered my UPI PIN but didn’t get cashback. What now?**  
A: Call your bank ASAP to reverse any unauthorized transactions. Freeze UPI via net banking under "UPI Control Settings."  

**Q: Can scammers access my Aadhaar or PAN via this scam?**  
A: No, unless you entered those details on the fake page. Change compromised UPI IDs immediately.  

**Q: Why does the fake page look exactly like PhonePe?**  
A: Scammers copy HTML/CSS from the real site. Always check the URL – official domains are **phonepe.com** (not .in, .org, etc.).  

Stay safe: Scan suspicious links at BharatSecure.app and report fraud to 1930 within 24 hours to increase recovery chances.  

> _Disclaimer: This article describes a pattern of fraud reported in public sources for public-safety awareness. It is not legal, financial, or medical advice. To request correction or removal of any content, write to hello@bharatsecure.app._