UPI fraud what to do

UPI Fraud: What to Do If You Lose Money Through UPI

UPI has made digital payments quick and convenient, but scammers also use fake payment requests, QR codes, fake customer-care numbers, phishing links and social-engineering tricks to steal money.

If you have become a victim of UPI fraud, don't panic and don't wait to see whether the money comes back on its own.

The most important thing is to report the financial fraud as quickly as possible.

In India, the National Cyber Crime Reporting Portal advises victims of financial cyber fraud to report it through the 1930 cybercrime helpline and the official cybercrime portal.

This guide explains exactly what you should do after a UPI scam, what information you should keep ready and how to report the fraud.

What Is UPI Fraud?

UPI fraud happens when someone tricks you into sending money or gains unauthorised access to your payment account and money is transferred without your permission.

Common examples include:

  • Fake customer-care calls
  • Fake cashback offers
  • Fake payment links
  • Fraudulent QR codes
  • Fake KYC/update messages
  • Fake job or investment offers
  • Someone pretending to be a bank employee
  • Someone asking you to install a remote-access app
  • Fake UPI collect/payment requests
  • Social-media or WhatsApp scams

NPCI specifically warns users about fake cashback links, QR-code scams, unknown apps, fake investment schemes and other social-engineering techniques.

UPI Fraud Happened? Do These Things Immediately

If money has been transferred from your bank account because of a UPI fraud, act immediately.

Step 1: Call 1930

The first important step is to call the National Cyber Crime Helpline — 1930.

The official National Cyber Crime Reporting Portal lists 1930 as the 24×7 cybercrime helpline for reporting financial cyber fraud.

Tell the helpline operator that you are reporting a financial cyber fraud.

Keep your transaction information ready so that you can provide the details quickly.

Official Cyber Crime Portal:
https://www.cybercrime.gov.in/

Cyber Crime Helpline: 1930

Step 2: Report the Fraud Online

After reporting the fraud, use the official National Cyber Crime Reporting Portal:

https://www.cybercrime.gov.in/

The portal provides an option to report cybercrime and includes a specific Financial Fraud section.

Do not use a random website found through a search engine to report the fraud.

Step 3: Keep Your Transaction Details Ready

Before filing your complaint, collect all the information related to the fraudulent transaction.

The official cybercrime portal's complainant checklist asks for important financial-fraud information such as:

  • Bank/wallet/merchant name
  • Transaction ID or UTR number
  • Transaction date
  • Fraud amount
  • Relevant evidence

The portal also asks complainants to keep relevant evidence ready.

You should therefore keep:

  • UPI transaction ID
  • UTR/reference number
  • Date and time
  • Amount lost
  • Bank name
  • UPI ID
  • Receiver's UPI ID, if available
  • Mobile number used by the scammer
  • WhatsApp messages
  • SMS
  • Email
  • Screenshots
  • Call details
  • Any website or payment link involved

Step 4: Save the Evidence

Do not delete anything related to the scam.

Save:

  • Screenshots of the transaction
  • Screenshots of WhatsApp chats
  • SMS messages
  • Phone numbers
  • Email messages
  • Payment links
  • UPI IDs
  • Website addresses
  • Call recordings, if available
  • Bank transaction details

The cybercrime reporting guidance specifically recommends preserving original evidence because it may be required by law-enforcement agencies.

Step 5: Contact Your Bank

Immediately contact your bank through its official customer-care number or official banking app.

Tell the bank that the transaction is fraudulent and ask them to register a fraud complaint.

Give them:

  • Transaction ID/UTR
  • Date and time
  • Amount
  • UPI details
  • Details of the fraud

Ask for the complaint/reference number and keep it safely.

Do not call a customer-care number sent to you by the scammer.

Step 6: Report the Transaction in Your UPI App

You should also report the fraudulent transaction through the UPI app you used.

Open your transaction history and select the relevant transaction.

Look for an option such as:

Help / Report a Problem / Raise a Complaint / Report Fraud

The exact wording can differ between apps.

Keep the complaint/reference number after submitting the complaint.

Step 7: Secure Your Bank and UPI Account

After a fraud, take steps to secure your account.

Depending on what happened, you may need to:

  • Change your banking password
  • Change your UPI PIN
  • Block a compromised card
  • Contact your bank
  • Remove an unknown app
  • Revoke suspicious permissions
  • Secure your email account

If you suspect that your phone has been compromised, avoid using an unknown app that was installed during the scam until you have secured the device.

Never Share Your UPI PIN to Receive Money

This is one of the most important UPI safety rules.

A scammer may say:

“I am sending money to you. Enter your UPI PIN to receive it.”

Do not do this.

NPCI warns that scanning a QR code and entering a UPI PIN is for making a payment, not for receiving money.

Don't Scan a QR Code to Receive a Refund

Another common scam involves someone claiming:

“Scan this QR code and you will receive your refund.”

Be careful.

A QR code can be used to initiate a payment. Never enter your UPI PIN simply because someone says you need to do it to receive money.

What If the Scammer Calls You?

Do not continue the conversation unnecessarily.

If someone claims to be from:

  • Your bank
  • UPI support
  • Police
  • Income Tax Department
  • Courier company
  • Electricity department
  • Government department

verify their identity independently.

Never share:

  • UPI PIN
  • OTP
  • ATM PIN
  • Internet banking password
  • Card CVV
  • Full banking credentials

What If You Installed a Remote-Access App?

Some scammers convince victims to install an app so that they can supposedly provide technical support or process a refund.

If you installed an unknown app during the scam:

  1. Disconnect from the internet if necessary.
  2. Do not enter additional banking information.
  3. Contact your bank using its official channel.
  4. Remove the suspicious application after taking any evidence you may need.
  5. Change important passwords from a trusted device.
  6. Report the incident through 1930 and the cybercrime portal.

What If the UPI Fraud Was Only an Attempt?

You don't necessarily need to wait until money is lost before taking action against a suspicious scam.

The National Cyber Crime Reporting Portal also provides a Report Suspect facility where suspicious identifiers such as website URLs, WhatsApp/Telegram handles, phone numbers, email IDs and social-media URLs can be reported.

If you received a suspicious message or link, preserve it instead of deleting it immediately.

Can You Get Money Back After UPI Fraud?

There is no guarantee that money lost through a fraud will be recovered.

However, reporting the fraud immediately is extremely important.

The cybercrime reporting system is designed to facilitate quick reporting of financial cyber fraud, and the information can be shared with banks/payment intermediaries for action.

The faster you report the incident, the sooner the relevant authorities and financial institutions can begin the appropriate process.

UPI Fraud vs UPI Payment Pending

These two situations are different.

UPI Payment Pending

You made a legitimate payment, but the transaction is still showing Pending.

In that situation, first check the transaction status and wait for the final result.

You can read our detailed guide here:

UPI Payment Pending? What to Do When Money Is Deducted

UPI Fraud

You were tricked, or money was transferred without your authorisation.

In this situation, don't simply wait. Report the financial fraud immediately through 1930, your bank and the official cybercrime portal.

Information You Should Keep for a UPI Fraud Complaint

Create a small record containing:

Information Example
Fraud amount ₹5,000
Date 10 September 2026
Time 10:30 AM
UPI Transaction ID Your actual transaction ID
Bank Your bank name
UPI App Google Pay/PhonePe/etc.
Suspect UPI ID If available
Suspect mobile number If available
Website/link If involved
Complaint number After reporting

Never publish these details on your website or social media.

They are only for your bank and the appropriate authorities.

Common UPI Scams You Should Know About

Fake Cashback Scam

Someone sends a message saying you have won cashback and asks you to click a link or enter your UPI PIN.

Fake Customer Care Scam

You search for a bank or payment app's customer-care number and accidentally call a fake number.

The person then asks for sensitive information or remote access.

QR Code Scam

Someone tells you that scanning a QR code will help you receive money.

Fake KYC Scam

You receive a message saying your bank or UPI account will be blocked unless you complete KYC through a link.

Investment Scam

Someone promises very high returns and asks you to transfer money through UPI.

Remote Access Scam

Someone asks you to install an app so they can supposedly help with a refund or payment problem.

How to Stay Safe From UPI Fraud

Follow these simple rules:

  • Never share your UPI PIN.
  • Never share an OTP.
  • Don't scan unknown QR codes.
  • Don't click suspicious payment links.
  • Don't install unknown apps.
  • Don't trust random customer-care numbers.
  • Verify the recipient before making a payment.
  • Check the amount before entering your UPI PIN.
  • Don't allow strangers to control your phone.
  • Keep your banking apps updated.
  • Report suspicious activity quickly.

NPCI's fraud-awareness guidance also specifically highlights fake cashback links, QR codes, search-engine scams, unknown apps and fake investment schemes as areas where users should remain cautious.

Official Websites and Helpline

National Cyber Crime Reporting Portal

https://www.cybercrime.gov.in/

Use the official portal to report cybercrime and financial fraud.

Cyber Crime Helpline

1930

The National Cyber Crime Helpline is available 24×7 for cybercrime reporting.

NPCI

https://www.npci.org.in/

Use NPCI's official website for information about UPI and digital-payment safety.

Frequently Asked Questions

What should I do first after UPI fraud?

If money has been lost through a UPI fraud, report it immediately by calling 1930 and then report the incident through the official National Cyber Crime Reporting Portal. Also contact your bank and UPI app.

Can I report UPI fraud online?

Yes. You can report cybercrime through the official National Cyber Crime Reporting Portal at cybercrime.gov.in.

What information is required to report UPI fraud?

Keep the transaction/UTR number, transaction date, fraud amount, bank details and supporting evidence ready.

Should I share my UPI PIN with customer care?

No. Never share your UPI PIN with anyone.

Can I get my money back after UPI fraud?

Recovery is not guaranteed, but reporting the fraud immediately can help the appropriate authorities and financial institutions take action.

What if I only received a suspicious UPI link?

Do not click it or enter your banking details. Preserve the evidence and consider reporting the suspicious identifier through the official cybercrime reporting facilities.

Final Words

If you become a victim of UPI fraud, don't wait and don't panic.

Report the financial fraud immediately through 1930, report it on the official cybercrime portal, contact your bank and report the transaction through your UPI app.

Keep your transaction details and evidence safely and never share your UPI PIN or OTP with anyone.

For more practical digital-payment guides, visit the GharSmart How-To section.

Similar Posts