UPI Payment Request Voice-Cloning Scam

INDIA — By BharatSecure Threat Intelligence Team ·

Verdict: Suspicious | Risk Score: 9/10 | Severity: critical

Category: UPI, WhatsApp, Phishing

How UPI Payment Request Voice-Cloning Scam Works

Overview: The UPI Payment Request Voice-Cloning Scam uses AI-generated voices to imitate family, friends, or trusted contacts—persuading victims to accept or initiate UPI transactions. The scam commonly starts when a contact's WhatsApp or phone profile is compromised, and the scammer sends a convincing voice note requesting money for an 'urgent' need. Since the voice matches, people rarely question these urgent requests and end up transferring funds directly to the fraudster's account. How It Works: 1. Scammer gains access to a friend's compromised account or voice sample. 2. Sends a personalised audio message on WhatsApp or makes a call: “Yaar, I’m in trouble, please send Rs 10,000 now, I’ll return it by evening.” 3. Victim sees familiar profile and hears a matching voice, so assumes it’s genuine. 4. UPI or bank transfer is requested, often with repeated follow-up for speed. India Angle: With UPI deeply integrated into day-to-day payments across India, this scam spreads particularly fast in urban and semi-urban areas. WhatsApp, used in nearly every region, is the main entry point. College students, professionals, and urban homemakers make frequent easy targets. Multilingual voice cloning is used to target according to preferred language. Real Examples: - “Priya, it’s me [using her friend’s voice], can you send some money on GPay urgently? Will explain later.” - “Chacha, I am stuck at the hospital, please transfer Rs 15,000 to this number, don’t tell anyone.” Red Flags: - Sudden request for money via audio message or call. - UPI/Paytm number differs from your usual contact’s details. - Excuses when you ask for direct call or video chat. - Pressures you for a fast transfer. Protective Measures: - Always confirm with the friend through a second channel (SMS, different number). - Ask for details only your true contact would know. - Do not act on urgent payment requests without context. - Set UPI app alerts for every debit/credit. If Victimised: - Report to your UPI app provider and your bank instantly. - File a complaint on cybercrime.gov.in and call 1930. - Warn your group circle to prevent further attempts. Related Scams: - WhatsApp account takeover plus payment requests. - UPI collect-request fraud impersonating friends. - Voice phishing for emergency charity donations.

How This Scam Works — Detailed Explanation

The UPI Payment Request Voice-Cloning Scam is a deceitful scheme that typically originates from compromised accounts on platforms like WhatsApp. Scammers often gain access to a victim's contact list by hacking into their social media or smartphone via phishing techniques. Once they infiltrate a contact's profile, they can easily imitate familiar voices and send voice notes to the victim requesting urgent UPI transactions. In many cases, these impersonations are made possible using sophisticated AI technology to create convincing sound-alike messages. Given the familiarity and trust attached to the voice, victims are more likely to comply without verifying the request, leading to significant financial loss.

The psychological tactics employed in this scam are particularly effective. Scammers often create a sense of urgency, claiming that the funds are needed for an emergency—be it a medical expense or a problem that needs immediate attention. By leveraging the established trust with the victim, they bypass skepticism and push forth with the narrative that only a quick UPI transfer can help. For example, if a family member’s voice is convincingly cloned and they request an immediate transfer for a supposed hospital bill, a victim may feel pressured to act without asking questions. This tactic manipulates the emotional and rational reasoning of the victim, clouding their judgment and prompting them to transfer money to the fraudster's account.

Once the victim receives the voice note, they often follow the request assuming it to be genuine. The process generally includes a quick transfer on a UPI app like Google Pay or PhonePe, initiated through the UPI ID or phone number provided in the scam call. For instance, if the voice note claims, “Please send ₹10,000 urgently to my new UPI ID for the hospital,” the victim may input the details without questioning its authenticity. This stage often concludes with the victim realizing they’ve sent money to a scammer only when they attempt to contact the alleged person later, leading to the painful realization of having been duped.

The real-world impact of the UPI Payment Request Voice-Cloning Scam is staggering. In India, scams involving payment applications have resulted in losses aggregating to hundreds of crores. According to CERT-In advisories, scams in the e-payment sector surged by nearly 70% within the last year, highlighting an alarming trend. Reports from financial institutions note that victims across India have collectively lost ₹100 crore in just the first quarter of 2023 due to various UPI related scams. Minister of Home Affairs has issued warnings reinforcing the necessity of cautious online behavior while using payment platforms like UPI, especially emphasizing the safeguards around Aadhaar and the guidelines issued by the RBI for UPI transactions.

To distinguish this scam from legitimate communications, victims should look for distinctive red flags. If a voice message appears out of the blue, especially if it has an urgent plea that is uncharacteristic for the contact, be skeptical. Other red flags include discrepancies in payment details, such as different UPI IDs that don't match your contact’s regular credentials, or if the caller is unwilling to communicate via another method like a video call for confirmation. Trust your instincts; if something feels off, always validate the request via another communication channel before proceeding with any transaction.

Visual Intelligence:

BharatSecure's AI has identified this as a used in scams targeting Indian users.

Who Does UPI Payment Request Voice-Cloning Scam Target?

General public across India

Red Flags — How to Identify UPI Payment Request Voice-Cloning Scam

  • Urgent voice message from a friend asking for UPI payment
  • Payment details do not match your contact’s regular account
  • Caller refuses a callback or video chat for confirmation
  • Pressures for secrecy or prevents verification

What To Do If You Encounter UPI Payment Request Voice-Cloning Scam

  1. Report the incident immediately at 1930 or visit cybercrime.gov.in for further guidance.
  2. Contact your bank's helpline, like SBI at 1800-11-1109 or HDFC at 1800-202-6161, to block your UPI access.
  3. Change your Aadhaar-linked accounts password and enable two-factor authentication.
  4. Inform family and friends about the potential scam to avoid them falling victim.
  5. Monitor your bank statements and UPI transaction history for any unauthorized activity.
  6. File a complaint with the local police station to officially document the scam.

How to Report UPI Payment Request Voice-Cloning Scam in India

  • Call 1930 — National Cyber Crime Helpline (24x7)
  • File a complaint at cybercrime.gov.in
  • Contact your bank immediately if money was lost
  • Call RBI helpline: 14440 for banking fraud

Frequently Asked Questions

What to do if I shared my OTP in a UPI scam?
Immediately contact your bank's helpline and report the incident. You may also reach out to 1930 or cybercrime.gov.in for assistance.
How can I identify the UPI Payment Request Voice-Cloning Scam?
Look for unexpected requests from contacts, especially with urgent money needs, and scrutinize the UPI ID used for payments.
How to report this type of scam in India?
Report the scam by calling 1930, visiting cybercrime.gov.in, or contacting your bank directly to stop any further transactions.
How can I recover my money or protect my accounts after this scam?
To recover lost funds, contact your bank immediately. Change all relevant passwords and consider filing a complaint with local authorities to strengthen your case.

Related Scams in India

Verify Any Suspicious Message

Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.