UPI Scams Explained — A Guide for Indian Seniors

UPI — Unified Payments Interface — moves more than 14 billion transactions a month in India. It is fast, free, and now how most of us pay the milk delivery, the electricity bill, and our children abroad. When used correctly, it is also one of the safest payment systems in the world.

But scammers have learnt UPI faster than most of us. And seniors — people who did not grow up tapping phones to pay — are often their first target. This guide walks through the four UPI scams that account for most senior complaints to the Cyber Crime Helpline, and the exact steps to protect yourself.

How UPI is supposed to work

Before we talk scams, a quick refresher — because many UPI scams rely on the fact that people do not clearly understand the difference between sending and receiving money on UPI.

• Send money: You tap Pay, enter the other person's UPI ID or scan their QR, enter the amount, enter your UPI PIN. The money leaves your account.
• Receive money: The other person sends you money. You do not enter any PIN to receive money. Ever. A notification comes, the money arrives. That is the whole process.

That single rule — no PIN needed to receive money — is the one that will protect you from the most common scam below.

Scam 1 — The fake "refund" or "accidental transfer" request

This is the most reported UPI scam for seniors.

You get a call or WhatsApp message: "Uncle, I accidentally transferred ₹5,000 to your account. Please refund it." They send you a "payment request" on your UPI app. The screen shows ₹5,000. You want to help, so you press Pay, enter your PIN, and the money leaves your account.

The scam: that ₹5,000 never came in. The scammer used the "Request Money" feature, which asks you to send money to them. Because the on-screen language says ₹5,000, and you are trying to help, you confirm without reading carefully.

Protection:

• First, check your bank SMS or UPI app history. Has ₹5,000 actually arrived? If not, there is nothing to refund.
• Second, remember the rule — you never enter a PIN to receive money. If your screen is asking for a PIN, you are about to send, not receive.
• Third, if money genuinely arrived by accident, politely say: "Please file a complaint with your bank. They will reverse it automatically." That is the real process.

Scam 2 — Screen-share fraud (AnyDesk / TeamViewer)

A caller claims to be from your bank, or from PhonePe/Google Pay support. They say your account is compromised or your KYC has expired. They ask you to install a "verification app" — often AnyDesk, TeamViewer, or QuickSupport. Once installed, they ask for a 9-digit code that appears on your screen.

That code is the remote-access code. Once they have it, they can see everything you type and tap — including your UPI PIN.

Protection:

• No bank, and no UPI app, will ever ask you to install AnyDesk, TeamViewer, or QuickSupport. Ever. If someone on a call is pushing you toward these apps, hang up.
• If you have already installed one, uninstall it immediately, turn off mobile data and Wi-Fi, and call your bank's fraud helpline from a different phone.
• Our guide on tech support scams covers the exact scripts these scammers use.

Scam 3 — The QR-code swap

You are at a small shop or a roadside vendor. You scan the QR code on the counter and pay ₹200. The shopkeeper says payment did not come. You check — your account is debited, but you have paid a stranger. A scammer had pasted a fake QR sticker over the real one.

Protection:

• Always wait for the shopkeeper's confirmation, not just your own phone's "Payment successful."
• Read the name on the payment-success screen. It should match the shop name. If you are paying "Sharma General Store" and the screen shows a random individual's name, stop the payment or ask the shopkeeper to verify.
• For amounts above ₹5,000, prefer a direct UPI transfer using the shop's printed UPI ID on a branded counter sticker, or pay by card.

Scam 4 — OTP phishing via fake bank SMS

An SMS says your UPI or bank access will be blocked unless you click a link and update your details. The link opens a page that looks like your bank's login. You enter your details. The scammer now has your bank credentials and can initiate a UPI payment from your account.

Protection:

• Banks never send KYC update links by SMS. Any SMS asking you to click a link and enter details is a phishing attempt.
• If your bank really needs a KYC update, the message will ask you to visit a branch or use your bank's official app — never a link.
• Check the sender ID. Real bank messages come from short codes like VK-HDFCBK, not from regular 10-digit mobile numbers.

If you have already been scammed

Speed is everything. Do all of these within the hour:

1. Call 1930 — the National Cybercrime Helpline. Keep your transaction SMS ready.
2. File online at cybercrime.gov.in. Choose "Financial Fraud" and then "UPI / Wallet."
3. Call your bank's fraud number. Every bank prints this on the back of the debit card and on the bank's home page. Ask them to freeze the transaction.
4. Freeze UPI temporarily. Inside your UPI app — PhonePe / Google Pay / Paytm / BHIM / bank app — look for "Block UPI" or "Disable UPI." Turn it off until the bank reaches back.
5. Keep a written note: date, time, amount, the scammer's number or UPI ID. You will need this at every step.

The five habits that prevent 95% of UPI scams

Teach these to your parents, or ask your children to teach them to you:

1. You never enter a UPI PIN to receive money.
2. Never install AnyDesk / TeamViewer / QuickSupport on a bank call.
3. Always read the name on the payment-success screen before confirming.
4. Banks never send KYC links by SMS.
5. Save 1930 in your phone as "Cyber Helpline" before you need it.

Frequently Asked Questions

Is UPI safe for seniors to use?

Yes, when used with the basic rules above. UPI itself is one of the safest payment systems in the world because every transaction requires both the recipient's UPI ID and your PIN. The risks are social-engineering scams, not the technology itself.

What is the difference between "Send Money" and "Request Money" on UPI?

Send Money is you paying someone — you enter a PIN. Request Money is someone asking you to pay them. When you approve a request, you are sending money, even if the scammer says "I am sending you a refund." Always read which direction the money is going.

Can someone steal money from my UPI without my PIN?

Not directly from a registered UPI app — the PIN is required for every payment. But if a scammer tricks you into installing a screen-share app, they can see and record your PIN when you enter it. That is why the screen-share rule matters most.

Which is the safest UPI app for seniors?

All major UPI apps — your bank's own app, PhonePe, Google Pay, Paytm, BHIM — are regulated by NPCI and have the same core security. Bank apps tend to have the simplest interface and an easier fraud-complaint path. For most seniors, using the bank app is the straightforward choice.

What is the 1930 helpline?

1930 is the national Cybercrime Helpline run by the Ministry of Home Affairs. It operates 24 hours. Call it within the first hour of realising you have been scammed — banks have a small window in which they can freeze a fraudulent transaction.

How do I check if an SMS is really from my bank?

Real bank SMS comes from a short sender ID like VK-HDFCBK or BP-ICICIB, not a 10-digit mobile number. Real messages also never include clickable links asking you to enter account details. When in doubt, do not click anything — open your bank's official app instead.

Keep reading

• Akshaya Tritiya Gold Scams 2026
• Aadhaar OTP Phishing — How to Stay Safe
• WhatsApp and Telegram Scams
• Tech Support Scams
• How to Report a Scam
• Phone Scams Targeting Seniors

✅ Reviewed & Verified by Eleanor Shaw | techfor60s.com Editorial Desk

Last fact-checked: 2026-04-18

Next scheduled refresh: 2026-07-18