Refund reversal UPI scam — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated Sep 11, 2026

Severity: Critical | View Full Scam Details

UPI Refund Reversal Scam in India (2026): How a ₹2 Transfer Can Cost You ₹20,000

Scammers are exploiting India's UPI ecosystem with a deceptively simple trick — sending you a tiny sum, then tricking you into handing over your UPI PIN to "return" it. With over 25,000 UPI fraud complaints reported in a single quarter of 2023 and an estimated ₹1,000 crore lost to digital fraud in 2022 alone, this scam is one of the most dangerous financial threats facing Indian mobile users right now.

What Is the Refund Reversal UPI Scam?

The refund reversal UPI scam is a social-engineering attack where fraudsters send a victim a tiny, unsolicited amount — often just ₹1 or ₹2 — then manipulate them into authorising a far larger outgoing payment under the pretext of "returning the mistaken transfer." It targets everyday UPI users across all age groups, particularly those who are polite, trusting, and unfamiliar with how UPI payment requests actually work.

The scam is widespread and growing. Public complaints collated by the Ministry of Home Affairs (MHA) and the Reserve Bank of India (RBI) indicate thousands of victims across India each year. In 2023 alone, more than 25,000 UPI fraud complaints were filed in a single quarter, reflecting how aggressively fraudsters are exploiting India's 300-million-plus UPI user base.

BharatSecure's threat-intelligence database has catalogued 13 fraudulent UPI identifiers verified through NPCI checks and community reports — underscoring that these are not random, isolated incidents but coordinated fraud patterns.

Exactly How This Scam Works — Step by Step

1. The bait transfer. A fraudster sends ₹1 or ₹2 to your UPI ID from an unknown account, often with a note like "sent by mistake."
2. First contact. Minutes later, you receive a WhatsApp message, SMS, or phone call. The caller claims to be from a bank, an e-commerce platform, or a payment service, and says the transfer was accidental.
3. Urgency and fear. They insist you must refund the amount immediately or face legal action, account suspension, or a penalty notice.
4. The fake refund request. Instead of asking for your UPI ID to send a collect request legitimately, they guide you to enter your UPI PIN — falsely claiming this is required to "process the refund."
5. Money gone. Entering your UPI PIN does not refund anything — it authorises a large debit from your account. Victims have reported losses of ₹20,000 or more in a single transaction, all initiated in seconds.
6. Contact cut off. The fraudster immediately stops responding. The money is transferred out, often in rapid micro-transactions that are harder to trace.

Real Warning Signs (What to Watch For)

• An unsolicited credit of ₹1–₹2 from an unknown UPI ID lands in your account
• A follow-up call or WhatsApp message arrives almost immediately, claiming it was a "mistake"
• The caller claims to represent a bank, IRCTC, Amazon, Flipkart, or a government body — but cannot verify details
• You are asked to "enter your PIN" to process or approve a refund (legitimate refunds never require your PIN)
• Urgency language: "Do it right now or your account will be blocked"
• Threats of legal action, police complaints, or penalties if you don't comply immediately
• The caller discourages you from calling the organisation's official helpline to verify

What Happens to Victims

Financially, victims lose amounts ranging from a few thousand to several lakh rupees — and UPI transactions, once authorised by the account holder's own PIN, are extremely difficult to reverse. The RBI's grievance redressal framework requires victims to report within a short window for any chance of a chargeback, but in practice, recovery is rare when the victim themselves entered the PIN. Banks typically treat PIN-authorised transactions as "authorised by the customer."

Beyond money, victims report significant psychological distress — shame, anxiety, and a lasting erosion of trust in digital payments. In some reported cases, victims have also been pressured for further payments after the initial loss, with callers threatening to "report" them unless they pay more to "close the case."

What RBI, CERT-In, and I4C Say

The RBI has consistently warned that no bank or payment entity will ever ask for your UPI PIN, OTP, or password — not to process a refund, not for verification, not for any reason. These advisories are part of the RBI's ongoing "RBI Kehta Hai" public awareness campaign.

CERT-In (cert-in.org.in), India's nodal cybersecurity agency, has flagged social-engineering attacks on UPI users as a high-priority threat category, urging users to report suspicious digital transactions promptly.

The Indian Cybercrime Coordination Centre (I4C), under the Ministry of Home Affairs, operates the 1930 cybercrime helpline and the portal cybercrime.gov.in specifically to receive and escalate such complaints. The sooner a complaint is filed after the fraud, the higher the chance of a transaction freeze.

Under the Information Technology Act, 2000 and the Bharatiya Nyaya Sanhita (BNS) 2023, cybercrime including fraudulent fund transfers carries serious criminal liability for perpetrators.

How to Protect Yourself

1. Your UPI PIN is a payment authoriser, not a verification code. Never share or enter it at anyone else's instruction.
2. Ignore unsolicited small credits. A ₹1 or ₹2 deposit you didn't request is a red flag, not a lucky windfall.
3. Hang up and call back officially. If a caller claims to be from your bank, hang up and dial the number on the back of your debit card or the bank's official website.
4. Refunds on UPI do not require your PIN. If someone says otherwise, it is a scam — full stop.
5. Enable transaction limits. Most UPI apps allow you to set per-transaction and daily limits; use them.
6. Do not act under urgency. Legitimate organisations give you time. Pressure to act "right now" is a manipulation tactic.
7. Block and report the UPI ID. Use the report function inside your UPI app (PhonePe, GPay, Paytm, BHIM) to flag the sender.

What to Do If You've Been Targeted

1. Call 1930 immediately. This is India's national cybercrime helpline. The faster you call, the better the chance of a transaction freeze before the money is withdrawn.
2. File a complaint at cybercrime.gov.in. Document the UPI transaction ID, the phone number, and any screenshots of messages.
3. Contact your bank's fraud helpline. Ask them to flag or freeze the transaction and raise a dispute. Provide the UTR (Unique Transaction Reference) number from your UPI app.
4. File an FIR at your nearest police station. Bring all digital evidence — screenshots, call logs, and the UPI transaction details.
5. Freeze your UPI app temporarily. Most apps allow you to disable your UPI ID from within the app settings while you investigate.
6. Do not pay any "settlement" the fraudster proposes. This is a secondary extortion tactic.

Frequently Asked Questions

Can a scammer access my account just by sending me ₹2? No — receiving money cannot compromise your account. The risk begins only if you engage with the follow-up call or message and, critically, if you enter your UPI PIN at their instruction. The ₹2 transfer is purely psychological bait designed to make you feel obligated to respond.

If I entered my UPI PIN and lost money, can I get it back? Recovery is difficult but not impossible if you act fast. Because you authorised the transaction with your own PIN, banks may classify it as "customer-authorised." However, filing a complaint at 1930 and cybercrime.gov.in within hours can trigger a freeze at the receiving end before the funds are moved further. Consult a lawyer for case-specific guidance on civil recovery options.

How do I tell a real bank refund from a scam? Genuine bank refunds appear automatically in your account without any action from you. No bank representative will ever call you and ask you to enter your PIN, share an OTP, or approve a collect request to receive money. If someone is asking you to do something to receive a refund, it is fraudulent.

Is it safe to use UPI after this kind of scam attempt? Yes — UPI itself is secure. The vulnerability is not technical; it is social. As long as you never share your PIN or approve unknown collect requests, your UPI account remains protected. Reporting the fraudulent UPI ID also helps NPCI and I4C take action to shut down the fraud network.

Stay one step ahead of scammers — paste any suspicious UPI message or number into the free scan tool at BharatSecure.app to check it against our verified fraud database. If you've already been targeted, call 1930 right now.

Disclaimer: This article describes a pattern of fraud reported in public sources for public-safety awareness. It is not legal, financial, or medical advice. To request correction or removal of any content, write to hello@bharatsecure.app.