UPI and OTP Scams: 7 Simple Rules That Keep Your Money Safe
Most online frauds don't hack your phone — they trick you into helping them. Seven simple rules every family member should know, and what to do in the first hour if something goes wrong.
A few weeks ago, a relative called me in panic. Someone claiming to be from “customer care” had asked for a code that just arrived on his phone, saying it was needed to stop his account from being blocked. Luckily he called me before sharing it. That code was an OTP — and sharing it would have emptied his account.
UPI has made payments wonderfully easy in India. But the same ease is used by fraudsters. The good news is that most scams don’t break into your phone — they trick you into opening the door. If you know a few simple rules, you can shut that door every time.
🔐 The 7 Rules
1. Your UPI PIN is only for paying — never for receiving
This is the most important rule. You never need to enter your UPI PIN to receive money. If someone says “enter your PIN to receive the refund” or “to get your prize”, it is a scam. Entering your PIN always means money is leaving your account.
2. Never share an OTP — with anyone
Not with “bank staff”, not with “customer care”, not with “delivery agents”. Real banks never ask for your OTP, PIN, CVV or password on a call, SMS or WhatsApp.
3. Read every “collect request” carefully
Fraudsters send a collect request that looks like they are paying you. If your app asks for your PIN, you are the one paying. When in doubt, decline.
4. Scanning a QR code is also for paying
A QR code is used to send money, not to receive it. If a “buyer” on a marketplace asks you to scan a QR code to get paid, stop right there.
5. Never install apps that someone tells you to install
Screen-sharing or remote-access apps let a stranger see — and control — your phone. No genuine bank or company needs this to solve your problem.
6. Search for customer care numbers only on official websites
Fake helpline numbers are often placed on search results and social media. Use the number printed on your card, passbook or the official app.
7. Urgency is a red flag
“Your account will be blocked in 10 minutes.” “Your electricity will be cut tonight.” “You have won a prize — claim now.” Fraudsters create panic so you don’t think. When someone rushes you, slow down.
“A real bank will never be in a hurry to take your PIN. Only a thief is.”
🚨 If Something Goes Wrong — Act in the First Hour
Speed matters. The faster you report, the better the chance of freezing the money before it moves further.
- Call 1930 — the national cyber fraud helpline — immediately, and note the acknowledgement number you receive.
- Report on cybercrime.gov.in, the National Cyber Crime Reporting Portal, with the details and screenshots.
- Call your bank and ask them to block your card, UPI and net banking, and raise a dispute.
- Don’t pay anyone who promises to “recover” your money for a fee — the official process is free.
👨👩👧 Share This With Your Family
We protect ourselves, but our parents and children are often the target. Sit with them for five minutes and explain just the first two rules: PIN only to pay, and never share an OTP. Those two lines alone stop most frauds.
Technology is a gift. A little awareness makes sure it stays one.
Software engineer by skill, storyteller by soul. I write about life, health, money and technology from my own experience — and build free tools you can use every day.
