Cyber fraudsters using new tech to bypass UPI security for financial transactions: Report

How Cyber fraudsters using new tech to bypass UPI security for financial transactions: Report Works

New technology is bypassing UPI app security. Fraudsters are using a toolkit called 'Digital Lutera' to steal money. This attack manipulates device trust, making traditional safeguards unreliable. Transactions worth lakhs have been processed in just two days.

How This Scam Works — Detailed Explanation

Cyber fraudsters in India have recently employed a dangerous new toolkit named 'Digital Lutera' to execute UPI fraud, manipulating device trust and essentially bypassing traditional security measures within UPI applications. Scammers often utilize platforms like WhatsApp to approach unsuspecting victims with enticing messages that promise easy money or lucrative offers. By posing as government officials, bank representatives, or even acquaintances, these fraudsters create a false sense of legitimacy. Victims are typically targeted based on their social media profiles or through unsolicited messages where the fraudsters pretend to need assistance with financial transactions, thereby gaining the victims' trust before introducing their malicious intents.

These scammers employ multiple psychological tactics to deceive their victims into providing personal information or enabling various permissions that facilitate the fraud. They might use urgency in their messaging, claiming that an immediate action is required to secure funds or avoid account suspension. Other times, they leverage emotional manipulation, for example, presenting an urgent family emergency needing financial support. Once victims engage and are convinced of the scam’s authenticity, they may be persuaded to share sensitive information like their UPI PIN, OTPs, or even their Aadhaar details, leading to significant financial losses.

The consequences for victims unfold rapidly. Upon receiving the required information, the fraudsters execute transactions from the victim's account, often racking up amounts worth lakhs within mere days. Recent reports suggest that victims in India have experienced losses aggregating to over ₹100 crore due to such attacks within a short span. One case involved a victim from Maharashtra who, after interacting with a fraudster posing as an SBI official, unwittingly transferred ₹25,000, only to find their entire savings wiped out as additional transactions followed. Such incidents highlight the vulnerability of individuals who use UPI—a technology designed for convenience—without being aware of the risks involved.

The impact of such scams is profound, not only for the victims but also for the financial ecosystem as a whole. The Ministry of Home Affairs (MHA) and the Reserve Bank of India (RBI) have ramped up their efforts to combat cybercrime, especially since guidelines have been issued urging users to maintain vigilance while using UPI and other digital platforms. CERT-In regularly updates its advisories, yet the rising instances of scams like these indicate a pressing need for increased public awareness. With each successful exploit of victims’ trust, the ripple effect spreads, and financial institutions find themselves on high alert, all while citizens become increasingly wary of digital transactions. The losses, totaling in the hundreds of crores, amplify the urgency for everyone to adopt more stringent safety measures when it comes to digital finances.

Identifying a scam versus legitimate communications can be challenging but crucial. Often, legitimate organizations will initiate communication through official channels, and they will never ask for sensitive information via unsecured mediums like WhatsApp. Always verify the authenticity of a message by directly contacting the organization through known and verified contact details. Be wary of unsolicited messages proposing offers that seem too good to be true or requesting prompt action concerning your financial information. Keep an eye out for grammatical errors or unprofessional formatting in messages, as these can often be tell-tale signs of a scam. Trusting your instincts while staying informed is key to protecting yourself against these emerging threats.

Visual Intelligence:

BharatSecure's AI has identified this as a used in scams targeting Indian users.

Who Does Cyber fraudsters using new tech to bypass UPI security for financial transactions: Report Target?

General public across India

Red Flags — How to Identify Cyber fraudsters using new tech to bypass UPI security for financial transactions: Report

• UPI
• digital fraud
• cybersecurity
• fraud toolkit

What To Do If You Encounter Cyber fraudsters using new tech to bypass UPI security for financial transactions: Report

1. Report any suspicious UPI transactions immediately by calling your bank's helpline or use cybercrime.gov.in.
2. Change your UPI PIN and any affected passwords urgently.
3. Enable two-factor authentication on your financial apps for added protection.
4. Log all interactions with suspicious contacts and report them to 1930.
5. Monitor your bank statements closely for unauthorized transactions.
6. Educate your family and friends about this emerging scam to help prevent them from becoming victims.

How to Report Cyber fraudsters using new tech to bypass UPI security for financial transactions: Report in India

• Call 1930 — National Cyber Crime Helpline (24x7)
• File a complaint at cybercrime.gov.in
• Contact your bank immediately if money was lost
• Call RBI helpline: 14440 for banking fraud

Frequently Asked Questions

What to do if I shared my OTP in a UPI fraud scam?

Immediately contact your bank helpline (e.g., SBI: 1800-11-1109) to block your account and report the incident.

How can I identify a UPI fraud scam?

Look for red flags like unsolicited messages, urgent requests for money, jargon-filled communication, or links to unidentified sites.

How do I report this type of scam in India?

You can file a complaint at 1930 or visit cybercrime.gov.in to submit a report on the incident.

What steps should I take to recover my money or protect my accounts after this scam?

Contact your bank to report unauthorized transactions and follow their recovery process, while also monitoring your accounts for further suspicious activity.

Verify Any Suspicious Message

Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.