UPI Payroll Redirection Fraud
Verdict: Suspicious | Risk Score: 9/10 | Severity: critical
Category: UPI, WhatsApp, Phishing
How UPI Payroll Redirection Fraud Works
Overview: UPI Payroll Redirection Fraud targets Indian employees by tricking them or their HR teams into updating salary disbursement information to a UPI-linked wallet or account controlled by fraudsters. This scam leads to entire salaries being paid to cybercriminals, sometimes without easy recovery. How It Works: Attackers contact employees, often posing as HR or payroll staff, and insist on an urgent update to 'link your UPI handle for salary disbursement as per RBI norms.' Victims are given a link or a QR code, and enter or share their updated account details—sometimes even OTPs. When actual salary processing occurs, the money is routed to the scammer’s UPI wallet. India Angle: The widespread adoption of UPI and digital wallets in cities like Mumbai, Delhi, and Ahmedabad make this scam especially dangerous for newer or small-scale firms that handle payroll via UPI transfers. Victims may also be instructed in Hindi, Gujarati, or regional languages, and receive scam instructions over WhatsApp or SMS. Real Examples: - Example 1: SMS: "Dear Employee, kindly update your UPI handle in the HR portal to avoid payment failure this month. Click here: [fake link]" - Example 2: WhatsApp message to HR: "Urgent UPI update required for salary bank, share details via attached link. Approve today to avoid hold." Red Flags: - Payroll update links sent via WhatsApp, SMS, or email - QR codes or short links that lead to login or information update pages - Rush to complete the update before a deadline - Request for OTP, login PIN, or sensitive salary data - Unfamiliar or unofficial HR communication Protective Measures: - Never click on payroll update links sent via social media or SMS; verify through official HR emails or direct calls - HR/Finance should only process payroll changes through secure, company-approved portals - Do not share UPI handles, OTPs, or PINs for salary purposes - Educate staff on safe payroll practices and reporting suspicious payroll emails/messages If Victimised: - Contact your bank or UPI provider to attempt to reverse the transaction - File a report at cybercrime.gov.in and call 1930 helpline - Notify HR, payroll administrator, and the RBI regulator if salary was lost Related Scams: - UPI fraud involving fake cashback or refund offers - Phishing for social security/Aadhaar updates - Fake HR WhatsApp groups requesting account verifications
Visual Intelligence:
BharatSecure's AI has identified this as a used in scams targeting Indian users.
Who Does UPI Payroll Redirection Fraud Target?
General public across India
Red Flags — How to Identify UPI Payroll Redirection Fraud
- Payroll update requests via WhatsApp/SMS
- Links or QR codes for salary updates
- Request for OTPs or passwords
- Unfamiliar sender/domain
- Deadline pressure to update UPI details
What To Do If You Encounter UPI Payroll Redirection Fraud
- Do not click any links or share personal information
- Block and report the sender immediately
- Report at cybercrime.gov.in or call 1930
- Inform your bank if financial details were shared
How to Report UPI Payroll Redirection Fraud in India
- Call 1930 — National Cyber Crime Helpline (24x7)
- File a complaint at cybercrime.gov.in
- Contact your bank immediately if money was lost
- Call RBI helpline: 14440 for banking fraud
Frequently Asked Questions
- What is UPI Payroll Redirection Fraud?
- Overview: UPI Payroll Redirection Fraud targets Indian employees by tricking them or their HR teams into updating salary disbursement information to a UPI-linked wallet or account controlled by fraudsters. This scam leads to entire salaries being paid to cybercriminals, sometimes without easy recovery. How It Works: Attackers contact employees, often posing as HR or payroll staff, and insist on an urgent update to 'link your UPI handle for salary disbursement as per RBI norms.' Victims are give
- How does UPI Payroll Redirection Fraud work?
- Overview: UPI Payroll Redirection Fraud targets Indian employees by tricking them or their HR teams into updating salary disbursement information to a UPI-linked wallet or account controlled by fraudsters. This scam leads to entire salaries being paid to cybercriminals, sometimes without easy recovery. How It Works: Attackers contact employees, often posing as HR or payroll staff, and insist on a
- How to protect yourself from UPI Payroll Redirection Fraud?
- Do not click any links or share personal information Block and report the sender immediately Report at cybercrime.gov.in or call 1930 Inform your bank if financial details were shared
- How to report UPI Payroll Redirection Fraud in India?
- Report to cybercrime.gov.in or call 1930 (National Cyber Crime Helpline). You can also contact your local police station's cyber cell.
Verify Any Suspicious Message
Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.