Fake UPI Beneficiary Addition Scam
Verdict: Suspicious | Risk Score: 9/10 | Severity: critical
How Fake UPI Beneficiary Addition Scam Works
Overview: Criminals are exploiting the simplicity of UPI by fraudulently adding themselves as beneficiaries to your bank account, enabling rapid transfer of funds before you can react. Victims are mostly those with online-enabled accounts—students, professionals, and homemakers who use mobile banking frequently are at heightened risk. The scam is dangerous because it allows fraudsters to drain balances in minutes, sometimes before victims even notice any alerts. How It Works: You receive a call or SMS supposedly from your bank, thanking you for a ‘new UPI device registration’ or ‘security upgrade.’ The fraudster then claims your account needs to be verified for the change and asks you to share an OTP or click an approval link or notification in your banking app. Believing it’s routine, you consent. The OTP, in reality, enables the scammer (not you) to register their own mobile or UPI ID as a beneficiary on your account. Immediate transfers are performed, often for the maximum daily limit. India Angle: The scam leverages the popularity of UPI and instant banking across India, especially in cities and large towns. Fraudsters pose as employees of ICICI, SBI, HDFC, or Axis Bank, and real SMS headers are sometimes spoofed to appear legitimate. This tactic is more frequent after recent UPI policy changes increasing payment limits. Real Examples: “SBI: We noticed device change request for your account, kindly confirm with OTP 456321. Call 982xxx if unauthorised.” Or, “HDFC Bank: Your UPI registration is nearly complete. Please approve in your app.” Red Flags: - Bank calls/SMS mention beneficiary addition or device change you did not initiate. - Unexpected OTPs for UPI or account modifications. - Urging you to click notification links or app prompts instantly. - Multiple transaction notifications in rapid succession. Protective Measures: - Never share OTPs related to UPI, device changes or beneficiary addition. - Review all notifications on your banking app before accepting changes. - Set strong, unique passwords on your UPI apps. - Enable SMS/Email alerts for account actions; review frequently. If Victimised: Contact your bank immediately to freeze outgoing UPI and block new beneficiaries. Report to 1930, cybercrime.gov.in, and escalate to RBI if your bank is slow to help. Related Scams: - Unauthorized credit card add-on requests. - ‘Phishing’ SMSes with fake support links.
How This Scam Works — Detailed Explanation
The Fake UPI Beneficiary Addition Scam targets unsuspecting individuals who frequently use online banking through platforms like UPI. Scammers often find their victims through data scraping on social media where individuals share their financial habits or through contact lists obtained via malicious software. This tactic allows scammers to specifically target students, professionals, and homemakers who are already accustomed to the convenience of digital transactions. They might initiate contact through a phone call, claiming to represent a well-known bank or tech company, and will feign urgency or a problem that requires immediate resolution.
Once a victim is on the line, scammers employ a range of psychological tricks to manipulate their target. They might create a sense of crisis, such as suggesting that there has been suspicious activity on the victim's UPI account that necessitates immediate action. This often includes pushy requests to confirm an unsolicited One-Time Password (OTP) linked to a supposed account change. By crafting a fabricated sense of trust, these callers can pressure victims into making quick decisions, often bypassing their common sense in the heat of the moment. Many victims do not realize they are victims until their accounts have been compromised and funds have been transferred to the scammer's account.
The scam proceeds in a calculated manner. After gaining the victim's trust, the fraudster will instruct them to approve a request to add a new UPI beneficiary, which actually has the scammer's account details. Within minutes, the victim might notice a sudden withdrawal or transfer from their account to the scammer's fake beneficiary, especially if they are not actively monitoring their bank transactions. Reports indicate that such scams can range from small transactions of a few thousand rupees to much larger sums, often amounting to crores lost in a single event. For instance, a report from the Ministry of Home Affairs highlighted a staggering ₹3 crore lost to UPI-related frauds across India in just one quarter of the year.
This scam's impact in India is dire. The Ministry of Electronics and Information Technology, along with CERT-In, has reported a disturbing trend where UPI fraud incidents have escalated, causing substantial financial losses for individuals and banks alike. Victims often find themselves in a helpless situation, with little recourse once funds are drained. In numerous cases, the money is transferred to accounts in various locations, making it almost impossible to trace and recover. Meanwhile, the regulators, including the Reserve Bank of India, are continually updating guidelines and advisories to combat these types of scams, underscoring the urgent need for public awareness and education surrounding digital finance security.
To counter the threat of this scam, understanding how to distinguish between legitimate communications and potential scams is crucial. For instance, any unsolicited messages or calls regarding beneficiary additions to your bank account should raise immediate red flags. Be wary of unexpected OTPs, especially if they pertain to UPI transactions or account changes you did not initiate. Legitimate banks will never solicit sensitive information over the phone or ask you to act on their behalf without proper verification. Additionally, if you notice any unusual activity in your account, such as multiple small transfers occurring in quick succession, take immediate action and report it to your bank’s helpline or through 1930, the national cybercrime helpline.
Visual Intelligence:
BharatSecure's AI has identified this as a used in scams targeting Indian users.
Who Does Fake UPI Beneficiary Addition Scam Target?
General public across India
Red Flags — How to Identify Fake UPI Beneficiary Addition Scam
- SMS/call about device/beneficiary changes not initiated by you
- Unsolicited OTPs related to UPI or account change
- Pushy requests to approve app notifications quickly
- Multiple suspicious small transfers in quick succession
What To Do If You Encounter Fake UPI Beneficiary Addition Scam
- Report any suspicious calls to the cybercrime helpline at 1930 or visit cybercrime.gov.in.
- Immediately contact your bank's customer service hotline (like SBI at 1800-11-1109 or HDFC at 1800-202-6161).
- Change your UPI PIN and any related passwords to secure your accounts.
- Review your recent bank statements for unauthorized transactions and gather evidence.
- Enable transaction alerts and notifications to monitor account activities in real-time.
- Educate your family and friends about this scam to prevent further victimization.
How to Report Fake UPI Beneficiary Addition Scam in India
- Call 1930 — National Cyber Crime Helpline (24x7)
- File a complaint at cybercrime.gov.in
- Contact your bank immediately if money was lost
- Call RBI helpline: 14440 for banking fraud
Frequently Asked Questions
- What to do if I shared my OTP in a UPI scam?
- Immediately call your bank's helpline and report the incident. You can also report it at cybercrime.gov.in.
- How can I identify this specific scam?
- Look for unsolicited calls or texts asking for OTPs and beneficiaries, especially if you haven't initiated any changes.
- How do I report this type of scam in India?
- You can report it through the cybercrime helpline 1930 or visit cybercrime.gov.in. Also, inform your bank.
- How can I recover my money or protect my accounts after this scam?
- Contact your bank immediately to block your account and report the fraud. They will guide you on recovery processes.
Related Scams in India
Verify Any Suspicious Message
Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.