A UPI payment request is fake or risky if it asks you to enter your UPI PIN to receive money, comes from an unknown person, has a receiver name that does not match, or pressures you to approve quickly. As NPCI says in its UPI Safety Shield guidance, UPI PIN is required to deduct money from your account, not to receive money.
This is the one line to remember:
If you enter your UPI PIN, money can leave your account.
That single idea stops a lot of scams.
How fake UPI requests work
Scammers usually pretend to be:
- A buyer on OLX or Facebook Marketplace
- A courier company
- A refund department
- A customer support agent
- A landlord or tenant
- A trading or investment group
- A relative in an emergency
They say they are sending you money. Then they send a collect request or ask you to scan a QR code. The screen may say “Pay” or ask for your UPI PIN.
If you approve it, you are not receiving money. You are sending money.
The safe UPI checklist
Before approving anything, check these five things.
1. Are you paying or receiving?
If you are receiving money, you should not need to enter your UPI PIN.
NPCI’s safety guidance says:
- Enter UPI PIN only to deduct money from your account
- UPI PIN is not required for receiving money
- Scan QR only for making payment, not for receiving money
If the other person says “enter PIN to receive,” stop.
For QR-specific examples, see our guide to QR code scams and UPI safety.
2. Is the receiver name correct?
Every UPI app shows a receiver name before payment. Read it.
If you are paying a shop called “Ramesh Medicals” but the name shows “Amit Kumar,” ask why. If you are paying a company and the name is a random person, do not proceed.
NPCI also advises users to verify the receiver’s name before paying.
3. Did the request come from someone you know?
Unknown UPI collect requests should be treated as suspicious.
If the request is from a buyer, ask them to send money normally to your UPI ID. You do not need to approve a collect request to receive money.
If it is from a company, open the company’s official app or website manually.
4. Is there pressure?
Scammers rush you.
They say:
- “Approve quickly, it will expire”
- “I sent the refund, just enter PIN”
- “This is the verification step”
- “You need to scan the QR to receive payment”
Slow down. A real payment will wait.
5. Did they ask you to install an app?
Do not install screen sharing, remote support, or SMS forwarding apps because a caller asks you to.
NPCI warns against downloading screen sharing or SMS forwarding apps when asked by unknown people. Those apps can let scammers watch your screen, read OTPs, or guide you into approving a payment.
Common fake UPI examples
The OLX buyer scam
You list a sofa for sale. A buyer calls within minutes and says he will pay first. He sends a QR code and says:
Scan this to receive Rs 8,000.
That is fake. Scanning a QR code is for paying someone, not receiving money.
The refund scam
A caller says your failed order refund is ready. They send a collect request and ask you to enter your PIN.
Refunds do not need your UPI PIN. If you enter the PIN, you may send money out.
The family emergency scam
Someone claims to be a cousin or friend and says they urgently need money. They may use a familiar photo or hacked WhatsApp account.
Call the person directly before paying. Use their saved number, not the number in the message.
The merchant name mismatch
You scan a QR at a small shop, but the name shown is unrelated. It may still be a family member’s account, but verify before paying. A swapped QR sticker is also possible.
What to do if you approved a fake UPI request
Move fast.
- Take screenshots of the transaction
- Note the UPI transaction ID
- Call your bank or UPI app support
- Report on cybercrime.gov.in or call 1930
- Block the UPI ID if your app allows it
- Do not respond to “refund” calls from the scammer
Keep the transaction ID and screenshots. They matter.
What Kaval would say
If you send Kaval a suspicious UPI request, you should get a direct answer like:
Risky. This request asks you to enter your UPI PIN, which means money will leave your account. Decline it. You do not need a PIN to receive money.
Or:
Do not scan this QR to receive payment. QR codes are for paying someone. Ask the buyer to send money to your UPI ID instead.
That is the level of clarity most people need in the moment.
Quick answer
If a UPI request asks for your PIN, it is asking you to send money. Verify the receiver name, decline unknown collect requests, never scan QR codes to receive money, and report fraud quickly through your bank and 1930.