Digital payment apps have revolutionized how we transact — but they've also created new opportunities for fraud. UPI and QR code scams have exploded globally, with scammers devising clever techniques to trick you into sending money instead of receiving it. Understanding these tactics is your first line of defense.
The "Collect Request" Trick
How it works: A scammer contacts you — often posing as a buyer on a marketplace like OLX or Facebook Marketplace — and says they want to pay you. Instead of sending money, they send a UPI "collect request" (payment request). If you approve it without reading carefully, money leaves your account instead of arriving.
How the conversation goes:
Scammer: "I'm interested in buying your item. I'll send you the payment now via GPay."
You receive a notification: "Payment request of ₹15,000 from merchant123@upi"
If you enter your PIN to "accept the payment," you've just sent ₹15,000 to the scammer.
Key rule: You never need to enter your UPI PIN to receive money. If any app asks you to enter your PIN or approve a request to "receive" payment, it's a scam.
Fake QR Codes
How it works: Scammers share QR codes claiming they're for receiving payment, but scanning the code actually initiates a payment from your account. This is common on classified sites, social media marketplace groups, and even physical stickers placed over legitimate QR codes at shops.
Real-world scenario:
A "buyer" on a marketplace sends a QR code on WhatsApp saying "Scan this to receive ₹5,000 for the item." When you scan it and enter your PIN, ₹5,000 is debited from your account — not credited.
How to protect yourself: Never scan a QR code to receive money. QR codes are only for paying. If someone sends you a QR code claiming you'll receive money by scanning it, it is always a scam.
Fake Refund & Cashback Calls
How it works: Scammers call pretending to be from your bank, a shopping platform, or a payment app. They claim you're due a refund or cashback and walk you through a process that actually authorizes a payment from your account. They may use screen-sharing apps to guide you.
Example call script:
"Hello, this is Flipkart customer care. Your order #4829 was returned but the refund failed. I'll process it now — please open your GPay app and enter the amount ₹2,499 on the screen I'll show you, then enter your PIN to receive the refund."
How to protect yourself: Legitimate companies never ask you to enter your UPI PIN for refunds. Refunds are processed automatically. Never share your screen with unknown callers, and never enter your PIN during a phone call.
Customer Care Number Scams
How it works: When people search Google for customer care numbers of banks or payment apps, scammers place fake numbers at the top of search results — through ads or fake websites. Victims call these numbers thinking they're reaching official support, then get tricked into sharing OTPs, UPI PINs, or installing remote access apps.
How to verify:
Always find customer care numbers from the official app or website — never from Google search results. Official support never asks for your UPI PIN, CVV, OTP, or remote access to your device.
How to protect yourself: Use the "Contact Us" section within the official app. Never trust customer care numbers from Google searches or social media posts. Screenshot suspicious messages and scan them with ScamSense.
Fake Payment Screenshot Scams
How it works: Scammers send you a doctored screenshot showing a successful payment — but no money actually arrives in your account. This is common in peer-to-peer sales, where the scammer "proves" they paid, picks up the item, and leaves before you realize the payment never came through.
Protection tip:
Always check your actual bank account or UPI app balance before releasing any goods or services. Screenshots can be easily faked with photo editing apps. Wait for real confirmation from your banking app, not from the buyer.
How to protect yourself: Never rely on screenshots as proof of payment. Always verify the actual credit in your bank account or UPI app. If selling in person, wait for the money to reflect before handing over the item.
The Golden Rules of UPI Safety
- Never enter your PIN to receive money. Receiving payments never requires PIN entry.
- Never scan QR codes to get paid. QR codes are only for sending money.
- Never share OTPs, PINs, or passwords — no bank or app will ever ask for them.
- Verify payment in your app before releasing goods — don't trust screenshots.
- When in doubt, scan with ScamSense. Paste the message or screenshot and get instant risk analysis.
Got a suspicious payment request?
Screenshot it and scan with ScamSense. Our AI detects UPI scam patterns instantly.
Download on Google Play