UPI and online payment safety tips
By the FreeAllTool team · Updated October 28, 2026
UPI has made paying and receiving money in India fast and easy. That convenience also attracts fraudsters. Most UPI scams work by tricking people into approving a payment themselves, so understanding a few rules protects you from nearly all of them.
The most important rule
You never need to enter your UPI PIN or scan a QR code to receive money. Entering your PIN always means money is leaving your account. If someone says “Scan this to receive your refund” or “Enter your PIN to accept the payment”, it is a scam.
Common scams
- Collect requests. A fraudster sends a payment request disguised as a refund, prize or buyer’s payment. Approving it sends your money to them. Read every request carefully before approving.
- Fake customer care numbers. Scammers post fake helpline numbers online. When you call, they ask you to install a screen-sharing app or share an OTP. Get support numbers only from the official app or website.
- Marketplace “buyers”. When you sell something online, a fake buyer may send a QR code “for the payment”. Scanning it and entering your PIN pays them instead.
- Screen-sharing apps. Remote access apps let someone see your screen, including OTPs and PINs. Never install one at a stranger’s request.
Good habits
- Keep your UPI PIN, card PIN, CVV and OTPs private, even from people who claim to be bank staff.
- Check the name shown on the screen before confirming any payment.
- Use a separate phone lock and app lock for payment apps.
- Set daily transaction limits that suit your needs.
- Keep your apps and phone software updated.
- Turn on SMS or app alerts for every transaction.
If you are a victim
Act immediately. Report the transaction in your payment app, call your bank to block further debits, call the national cyber crime helpline 1930, and file a complaint at cybercrime.gov.in. Reporting quickly gives the best chance of the money being frozen before it is moved on.
Protect the accounts linked to your payments with strong unique passwords from our password generator.