SBI Reports Massive Banking Fraud, UPI as Key Entry Point — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated Jun 10, 2026

Severity: Critical | View Full Scam Details

SBI Reports Massive Banking Fraud Using UPI in India — 2026 Warning

A sharp rise in banking fraud targeting SBI customers via UPI transactions has triggered alerts from India’s cybersecurity and financial authorities.

What Is the SBI Reports Massive Banking Fraud, UPI as Key Entry Point?

In 2026, multiple reports to police and consumer forums indicate a surge in banking fraud cases where fraudsters exploit the Unified Payments Interface (UPI) to drain SBI accounts. According to complaints received by Indian cybercrime agencies, scammers impersonate bank representatives or trusted contacts to manipulate victims into authorizing UPI transactions. This fraud pattern is widespread across metro cities and smaller towns, affecting thousands of SBI customers in India.

While SBI has reported these large-scale frauds to the Reserve Bank of India (RBI) and CERT-In (Indian Computer Emergency Response Team), the exact scale is still under investigation. The RBI has issued general warnings about increased UPI-related frauds, and the Integrated Cyber Crime Coordination Centre (I4C) continues to track such incidents as part of India’s cybersecurity framework. The most crucial entry point is the UPI platform, preferred by fraudsters for its ease of use and immediate fund transfers in Indian rupees (INR).

How This Scam Works — Step by Step

1. Initial Contact: The victim receives a call or WhatsApp message claiming to be from SBI customer service, a government official, or a trusted organization. In some cases, the callers also masquerade as relatives asking for urgent financial help.

2. Urgency & Persuasion: The caller pressures the victim by citing a fake issue, such as suspicious activity on their account or a pending government subsidy. The goal is to rush the victim into acting without verifying.

3. UPI Transaction Request: The scammer asks the victim to share their UPI PIN or scan a QR code “to verify identity” or “freeze the account.” They may also send a false UPI collect request or payment link disguised as an official SBI alert.

4. Authorization: The victim enters the UPI PIN or approves the transaction, unknowingly authorizing fund transfers to accounts controlled by fraudsters.

5. Fund Transfer & Disappearance: Once the money is transferred, it is quickly withdrawn or moved through multiple accounts, making recovery hard.

6. Cover-Up: Fraudsters may call back claiming the transaction was a mistake and offer false help, prompting victims to share more sensitive details or approval, deepening the loss.

Real Warning Signs to Watch For

• Calls or messages pressuring you to act very quickly on your SBI account.
• Requests to share your UPI PIN or OTP under any pretext.
• Unexpected payment requests or UPI collect requests for small or large amounts.
• QR codes sent over WhatsApp or SMS claiming to be from SBI or government agencies.
• Callers who don’t use your correct name or banking details.
• Appeals for emergency financial help allegedly from relatives, but via unknown numbers.
• Alerts about “account freezes” that require you to make immediate transactions.

What Happens to Victims

Victims often lose significant sums—sometimes lakhs of rupees—transferred instantly via UPI, which does not allow reversals once authenticated. Because the scam exploits UPI, the stolen money frequently moves through layered accounts, making tracing complex. Victims face huge stress and confusion, compounded by the challenge of navigating bank procedures for complaint registration and claims.

Many also report secondary harms, such as SIM swapping when fraudsters gain mobile control, or Aadhaar misuse when biometric or identity details are exposed. This impacts credit scores and future banking access, risking prolonged financial difficulty in India’s digital economy.

What RBI and CERT-In Say

The Reserve Bank of India (RBI) has repeatedly advised customers never to share banking passwords, UPI PINs, OTPs, or scan codes with anyone. RBI’s latest circulars stress awareness of digital payment frauds and caution against clicking on unknown payment links.

CERT-In urges users to report suspicious calls and messages related to banking immediately and recommends upgrading phone OS and apps to prevent malware. The 1930 National Cyber Crime Helpline is a government resource for victims to report fraud and get guidance. The Integrated Cyber Crime Coordination Centre (I4C) coordinates with banks and law enforcement to crack down on such incidents.

How to Protect Yourself

1. Never share your UPI PIN, OTP, or password with anyone, even if they claim to be from SBI or government agencies.
2. Verify unexpected calls by calling SBI customer care directly on official numbers—avoid callback numbers given by callers.
3. Don’t scan QR codes or approve payment requests received unexpectedly via WhatsApp, SMS, or email.
4. Use the official BHIM or SBI YONO apps downloaded only from trusted sources (Google Play Store, Apple App Store).
5. Regularly check your SBI account statements and hold transaction alerts on your phone.
6. Register your mobile number with your bank to prevent SIM swap fraud and promptly alert your operator if you lose your phone.
7. Educate family members, especially elders, about UPI scams and encourage them to verify any payment request.

What to Do If You’ve Been Targeted

• Immediately inform your SBI branch and block or freeze your UPI ID and bank account if possible.
• Report the fraud to your bank’s fraud department and your mobile operator in case of suspected SIM swap.
• File a complaint at the National Cyber Crime Reporting Portal at cybercrime.gov.in.
• Call the 1930 Cyber Crime Helpline for assistance on next steps and monitoring.
• Lodge a complaint with the local police station to get an FIR registered.
• Change your UPI PIN and all related banking passwords on official apps only.
• Avoid further communication with the suspected fraudsters and do not share any more personal information.

Frequently Asked Questions

Q: Can I get my money back if I share my UPI PIN by mistake?
A: Generally, UPI transactions are final once authorized. Banks may investigate reports, but reversal is difficult unless fraud is proven quickly. Early reporting increases chances of recovery.

Q: Why do fraudsters ask me to scan a QR code or send OTP?
A: Scanning a fake QR code or sharing OTP lets fraudsters initiate transactions from your linked bank account. These are common tactics in UPI fraud.

Q: How do I verify if a call is genuinely from SBI or government agencies?
A: Use official contact numbers from SBI’s website or RBI announcements. Never trust numbers provided by suspicious callers or messages.

Stay alert by verifying suspicious messages or calls at BharatSecure.app and report fraud immediately at the 1930 helpline to protect yourself and others.

Disclaimer: This article describes a pattern of fraud reported in public sources for public-safety awareness. It is not legal, financial, or medical advice. To request correction or removal of any content, write to hello@bharatsecure.app.