UPI Intent Link Phishing Scam
यूपीआई इंटेंट लिंक फिशिंग स्कैम
INDIA — By BharatSecure Threat Intelligence Team ·
Verdict: Dangerous | Risk Score: 9/10 | Severity: MEDIUM
How UPI Intent Link Phishing Scam Works
- Step 1: Scammers send fake UPI payment links via SMS, WhatsApp, or email pretending to be from banks, merchants, or friends
- Step 2: Victim clicks the malicious UPI intent link which opens the UPI app's payment interface directly
- Step 3: Link shows small amount (₹1-10) or claims to be refund/verification with urgent threatening language
- Step 4: Victim enters UPI PIN thinking it's legitimate, giving scammers access to their account
- Step 5: Fraudsters execute multiple high-value transactions instantly while victim remains unaware until SMS alerts
How This Scam Works — Detailed Explanation
In India, UPI (Unified Payments Interface) has made digital payments fast and simple, but scammers have found new ways to exploit it. The UPI Intent Link Phishing Scam is a dangerous fraud where scammers send fake payment links through SMS or WhatsApp. These links look like genuine UPI payment requests but are actually designed to steal your UPI PIN and other sensitive financial information. The scam usually begins when you receive an unexpected message claiming there is an issue with your recent transaction or that your bank account will be blocked if you don’t act immediately.
Scammers often use urgent and threatening language to create panic, urging you to click on a payment link they send. These links may contain misspelled words in the URL, such as 'paymnet' instead of 'payment', which can be hard to spot. When you click these links, a fake UPI interface opens, tricking you into entering your UPI PIN or login details under the pretext of verifying a refund or canceling a failed transaction. Since UPI does not require the user to enter full bank details every time, scammers rely heavily on capturing your PIN to authorize payments.
Once scammers get access to your UPI PIN or login credentials, they can initiate unauthorized transactions directly from your bank account linked to your UPI ID. Victims often realize the theft only after seeing unauthorized debits or when contacted by their bank for suspicious activities. The scam targets common Indian platforms like WhatsApp — widely used across all age groups — making it easy to spread. Additionally, some links might mimic official bank portals or use Aadhaar-related terms to gain your trust.
This scam can severely impact your finances, as unauthorized transactions often drain your bank account quickly. Due to the increasing number of such cases reported across India, the government and banks have urged people to be cautious of any unsolicited payment links and to report suspicious messages promptly to the cybercrime helpline 1930. Awareness is key to avoiding falling victim to such sophisticated phishing scams targeting UPI users.
Who Does UPI Intent Link Phishing Scam Target?
Urban and semi-urban Indians aged 25-50, especially salaried professionals, small business owners, and frequent UPI users in metros like Mumbai, Delhi, Bengaluru
Red Flags — How to Identify UPI Intent Link Phishing Scam
- Unexpected UPI payment links received via SMS or WhatsApp from unknown sources
- Urgent or threatening language claiming account will be blocked or frozen
- Links with misspelled domains like 'paymnet' instead of 'payment'
- Requests to enter UPI PIN for verification or refund purposes
- Claims of failed transactions or suspicious activity requiring immediate action
What To Do If You Encounter UPI Intent Link Phishing Scam
- Do not click on any UPI payment links received unexpectedly via SMS or WhatsApp from unknown contacts.
- Verify all suspected messages by calling your bank’s official customer care number before taking any action.
- Report the scam immediately to the National Cyber Crime Helpline by calling 1930.
- Change your UPI PIN and mobile banking passwords if you accidentally entered details on a suspicious link.
- Inform your bank about unauthorized transactions promptly so they can block your account if needed.
How to Report UPI Intent Link Phishing Scam in India
- Call 1930 — National Cyber Crime Helpline (24x7)
- File a complaint at cybercrime.gov.in
- Contact your bank immediately if money was lost
- Call RBI helpline: 14440 for banking fraud
Frequently Asked Questions
- What is UPI Intent Link Phishing Scam?
- Dangerous: UPI Intent Link Phishing Scam is a confirmed scam in India. Beware of UPI intent link phishing scams in India. Learn to identify fake payment links, protect your money, and report to cybercrime helpline 1930.
- How does UPI Intent Link Phishing Scam work?
- Step 1: Scammers send fake UPI payment links via SMS, WhatsApp, or email pretending to be from banks, merchants, or friends Step 2: Victim clicks the malicious UPI intent link which opens the UPI app's payment interface directly Step 3: Link shows small amount (₹1-10) or claims to be refund/verification with urgent threatening language Step 4: Victim enters UPI PIN thinking it's legitimate, giving scammers access to their account Step 5: Fraudsters execute multiple high-value transactions instantly while victim remains unaware until SMS alerts
- How to protect yourself from UPI Intent Link Phishing Scam?
- Do not click on any UPI payment links received unexpectedly via SMS or WhatsApp from unknown contacts. Verify all suspected messages by calling your bank’s official customer care number before taking any action. Report the scam immediately to the National Cyber Crime Helpline by calling 1930. Change your UPI PIN and mobile banking passwords if you accidentally entered details on a suspicious link.
- How to report UPI Intent Link Phishing Scam in India?
- Report to cybercrime.gov.in or call 1930 (National Cyber Crime Helpline). You can also contact your local police station's cyber cell.
Related Scams in India
Verify Any Suspicious Message
Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.