5 Most Common UPI Scams in India
A complete guide to the latest UPI scams in India, from collect requests to screen sharing, and how to protect yourself.
Written by
WithUPI Team
Practical notes from the WithUPI team on trust, payment clarity, and better ways to present your UPI identity.
With over 22.7 billion transactions happening every month, UPI is the backbone of digital India. However, this massive volume also makes it a prime target for scammers.
While the underlying technology of UPI is incredibly secure, fraudsters use social engineering and psychological tricks to steal money. The good news? You can protect yourself against almost all of them by understanding how they work.
Recognize the red flags: Fake payment requests and phishing links are the most common ways scammers target UPI users.
Here are the 5 most common UPI scams in India right now, and how you can shield yourself instantly.
1. The "Money Received" Collect Request Scam
This is arguably the most widespread UPI scam, commonly targeting people selling items on platforms like OLX or Facebook Marketplace.
How it works: The scammer contacts you, agreeing to buy your item at the asking price without negotiation. To "pay" you, they send a UPI Collect Request to your phone. The notification might deceptively say something like "Payment of ₹5000 successful. Enter PIN to receive."
The reality: You never need to enter your UPI PIN to receive money. Entering your PIN always deducts money from your account.
2. The Screen Sharing App Scam
This scam often targets individuals seeking customer support for banks, airlines, or delivery services.
How it works: You find a fake customer care number online. The "agent" tells you they need to verify your account and asks you to download a screen-sharing app like AnyDesk or TeamViewer. Once installed, they ask you to open your UPI app and make a small dummy transaction (like ₹1).
The reality: Because they are watching your screen, they see your UPI PIN as you enter it. Later, they use your credentials to drain your account.
3. The Fake QR Code at Local Shops
This happens at physical stores where QR codes are pasted on the counter.
How it works: Scammers print their own UPI QR codes and stealthily paste them over the real QR codes at busy shops, petrol pumps, or pharmacies.
The reality: When you scan the code and pay, the money goes to the scammer's account instead of the shopkeeper. Always verify the merchant's name that appears on your app screen before hitting send.
4. The SIM Swap / Call Forwarding Trick
This is a more sophisticated scam that requires tricking your telecom provider or your phone settings.
How it works:
The scammer convinces you to dial a specific USSD code (like *401*#) followed by their number. This activates call forwarding. Or, they might manage to get a duplicate SIM card issued in your name.
The reality: They use this access to receive the OTPs required to register your UPI account on their device. Never dial unknown codes on your phone or share OTPs.
5. The "Lottery Win" Phishing Link
You receive an SMS or WhatsApp message claiming you've won a lottery, a cash prize, or a cashback offer from Google Pay or PhonePe.
How it works: The message contains a link. Clicking it opens a fake website that looks exactly like your UPI app, prompting you to "Claim Reward" by entering your UPI PIN.
The reality: Legitimate cashbacks are credited directly to your bank account or wallet. You will never be asked to enter a PIN to claim a prize.
The 1-Step Shield: Stop Sharing Your Phone Number
Most of these scams (especially the Collect Request and Phishing scams) start because your phone number—which is often tied directly to your UPI ID—is exposed online.
When you share your standard UPI ID (like 9876543210@bank), scammers instantly have your direct contact number.
How WithUPI Protects You
To completely eliminate the risk of random collect requests and targeted spam, stop sharing your raw UPI ID or phone number.
Instead, use a WithUPI proxy page.
WithUPI allows you to create a professional, secure payment link (like withupi.com/@yourname).
- No Phone Number Exposed: Your personal number stays completely hidden.
- No Collect Requests: People pay you directly through the secure gateway; they cannot send reverse "collect" requests to a WithUPI link.
- Professional Checkout: It looks like a verified merchant checkout, building trust with genuine buyers and clients while keeping scammers at bay.
Setting up your shield takes less than 30 seconds. Create your free WithUPI profile today.