Impersonation via Fake UPI Collect Requests

How Impersonation via Fake UPI Collect Requests Works

Overview: Fake UPI collect request scams are sweeping India, with fraudsters requesting money under false pretenses through UPI's 'Collect' feature. These scams fool unsuspecting people into approving payments they never intended to make. Often backed by follow-up calls posing as bank staff, the scammers pressure victims (especially elderly people and new UPI users) to approve transactions—sometimes by exploiting fear (e.g., accounts will be blocked) or tempting offers. Since collect requests can look official, users are often caught off guard. How It Works: 1. The scammer sends a UPI collect request for a relatively small amount (often ₹500-₹2000), making it less alarming. 2. The request uses a misleading name or VPA that mimics common bank or service provider names. 3. The victim receives the collect request notification. Around the same time, the scammer calls posing as bank support, company representative, or government official. 4. The caller invents a story—your KYC is expiring, there’s a cashback, or your account will be frozen—creating urgency or appealing to greed. 5. The scammer insists the collect request must be approved, sometimes claiming it’s required for service continuation or refunds. 6. On approval, the amount is instantly transferred to the scammer’s account, often followed by further attempts to get larger sums or steal more information. India Angle: India’s wide UPI and mobile banking adoption has made these scams common in both cities and small towns. Fraudsters especially target elderly people, rural newcomers to smartphones, and gig workers used to small, frequent digital payments. The collect request feature is well known among merchants but less understood by regular users, making them vulnerable. Calls often come from non-official phone numbers speaking Hindi, English, or regional languages. Banks most targeted include SBI, HDFC, Paytm Payments Bank, and Airtel Payments Bank. Real Examples: - “You have a pending HDFC Rewards payment. Approve the ₹799 request in your UPI app.” - “I am calling from XYZ Bank’s verification team. For security, please approve the UPI request you just got—this is a standard step.” - “Sir, failure to approve this collect request will block your account in 2 hours. We are from RBI support.” Red Flags: - Arriving collect requests from unknown VPAs or people disguised as customer care - Calls giving urgent, high-pressure instructions to approve UPI collect - Requests that don’t match your recent activity or expected refunds - No prior communication about the payment before the collect request Protective Measures: - Never approve a UPI collect request from an unknown individual or unexplained source - Confirm the sender’s VPA and intent by calling your bank’s official helpline - Ignore and block such requests, especially if followed up by aggressive phone calls - Educate elderly relatives and digital newcomers about the risk If Victimised: - Quickly inform your bank and request a freeze on your account - Report to the Cybercrime Helpline (1930) or cybercrime.gov.in - Note the fraudulent collect request details for the complaint Related Scams: - Vishing scams by bogus “RBI” or “bank” officers demanding PINs/OTP - Crooks impersonating telecom or utility companies for “bill payment” collects - Account compromise via ‘digital arrest’ threats using UPI requests

How This Scam Works — Detailed Explanation

Scammers often initiate contact through social media platforms, WhatsApp, or even unsolicited phone calls, targeting users who may be unfamiliar with UPI transactions. They exploit confusion and technical naivety, especially among the elderly and new UPI users. The scammers may research their targets via social media to gain information about their financial habits or recent activities, allowing them to craft convincing stories that entice their victims. For instance, they might pose as bank representatives needing to verify a transaction, which immediately puts the victim on the defensive.

The psychological manipulation begins with urgency and fear. Scammers often claim that there has been suspicious activity on the victim's account or that their account will be frozen if immediate action isn’t taken. This tactic preys on the victim's fear of losing access to their funds or missing out on time-sensitive opportunities. The scammers then send a fake UPI collect request, prompting the victim to approve an amount that they do not recognize, luring them in with pressures such as “You will lose ₹10,000 if you do not respond now.” The follow-up call serves to reinforce this fear, creating a sense of panic that overrides the victim’s judgment.

In India, many victims have fallen prey to this scam. A typical scenario unfolds as follows: A retired individual receives an unexpected call from someone claiming to be from SBI’s customer service. The caller warns that a fraudulent transaction is underway and instructs the individual to open their UPI app to approve a collect request for ₹5,000. When the victim refuses, the scammer raises the pressure, saying their account will be frozen due to suspected fraud. Unsurprisingly, the victim succumbs to fear, naïvely approving the payment, only to realize later that they've been scammed. Reports indicate that millions have been lost collectively in scams of this nature, with the Ministry of Home Affairs stating that over ₹300 crore was reported lost to cybercrime in a single year.

The damage from these scams extends beyond financial loss; it erodes consumer trust in digital payment systems, slowing the growth of platforms like UPI that promise easy transactions. The Reserve Bank of India and CERT-In issues regular advisories to promote safe practices, highlighting the need for vigilant behavior from consumers. Many victims, particularly from smaller towns and rural areas, may not even be aware that they can report these incidents, leaving them vulnerable to repeated scams.

To differentiate between genuine and fake communications, always verify the identity of the caller. If you receive a UPI collect request from an unknown or suspicious account, it is crucial to pause before taking action. Legitimate institutions will not pressure you for immediate responses. Instead, hang up and directly call your bank’s helpline, ensuring you're using official numbers, such as SBI at 1800-11-1109 or HDFC at 1800-202-6161. Recognizing the signs early can save you from becoming yet another victim in this rising tide of UPI scams.

Visual Intelligence:

BharatSecure's AI has identified this as a used in scams targeting Indian users.

Who Does Impersonation via Fake UPI Collect Requests Target?

General public across India

Red Flags — How to Identify Impersonation via Fake UPI Collect Requests

• Unexpected collect requests to your UPI app
• Follow-up calls from unofficial numbers with urgent instructions
• Demands to approve requests unrelated to your recent activity
• Sender’s VPA/account is unfamiliar or suspicious
• Caller refuses to let you verify via the official bank helpline

What To Do If You Encounter Impersonation via Fake UPI Collect Requests

1. Report the incident immediately at 1930 or visit cybercrime.gov.in for assistance.
2. Contact your bank’s customer care to inform them about the suspicious UPI request.
3. Monitor your bank statements closely for any unauthorized transactions.
4. Advise friends and family members to remain vigilant about unexpected UPI requests.
5. Consider changing your UPI PIN and locking your bank account temporarily to prevent future fraud.

How to Report Impersonation via Fake UPI Collect Requests in India

• Call 1930 — National Cyber Crime Helpline (24x7)
• File a complaint at cybercrime.gov.in
• Contact your bank immediately if money was lost
• Call RBI helpline: 14440 for banking fraud

Frequently Asked Questions

What to do if I shared my OTP in a UPI scam?

Immediately contact your bank's helpline to report the incident. Change all related passwords and visit cybercrime.gov.in.

How can I identify if a UPI collect request is fake?

Check for unexpected requests, unfamiliar sender IDs, and remember, no legitimate company will pressure you for immediate approval.

How to report this type of scam in India?

You can report UPI scams at the cybercrime helpline 1930, visit cybercrime.gov.in, or notify your bank's fraud department.

Is it possible to recover money or protect my accounts after this scam?

Contact your bank to file a complaint and lock your account. You may also need to report the incident to cyber authorities for further investigation.

Verify Any Suspicious Message

Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.