Digital Payment Security: How to Stay Safe from UPI and Card Fraud

The most common UPI scams

Collect request scams: Someone sends you a UPI collect request disguised as a payment. Never approve a collect request from anyone you don't know, and always verify the amount before approving — scammers change the amount at the last moment.

QR code scams: Fraudsters replace genuine QR codes at shops with their own. Always verify the merchant name and amount before scanning. Never scan QR codes sent by strangers claiming to send you money — they're actually requesting money from you.

Credit and debit card safety

Never share your card number, CVV, or OTP with anyone claiming to be from your bank. Banks never ask for these details over phone or SMS. Skimming devices at ATMs can clone your card — always cover the keypad while entering your PIN and check for any loose or unusual attachments on the card slot.

Use virtual cards (available through most banking apps) for online shopping — they have limited validity and amount, so even if compromised, the damage is contained.

Strong authentication practices

Enable transaction alerts for all your accounts — every debit and credit should trigger an immediate SMS or app notification. Set UPI transaction limits (most apps allow you to set per-transaction and daily limits). Use biometric authentication where available instead of PINs that can be shoulder-surfed.

Don't save card details on shopping websites you rarely use. Use a dedicated email address for financial accounts, separate from your social or work email, to reduce phishing exposure.

What to do if you're scammed

Act immediately: call your bank to freeze the card or account, file a complaint on the National Cybercrime Portal (cybercrime.gov.in) or call the helpline at 1930, and report the incident at your local police station. For UPI fraud, also report through the UPI app's complaint section — most banks have a 48-hour window for dispute resolution.