Ravindra BagaleCourses & study guides Track your progress

Guides Cyber safety for everyone

UPI Fraud: How to Stay Safe (Collect Requests and Wrong Transfers)

By , Cyber Security trainer LinkedIn Published: Last updated:

UPI fraud often uses fake “collect” requests, QR codes, or rushed PIN entry. A collect request that you approve sends money out of your account. Decline unknown collects, never share your UPI PIN, and read the name and amount before you pay.

Quick steps

  1. Collect request = money leaving your account if you approve.
  2. Decline collects you did not expect — real refunds do not need stranger collects.
  3. Never share UPI PIN, OTP or screen-share during payment.
  4. Before paying, match payee name and amount; for QR, confirm the merchant.
  5. If money left wrongly, call your bank at once and report on cybercrime.gov.in / 1930.

Why this matters

Amit in Surat approved a WhatsApp “refund collect” and lost money from her account. Neha in Pune almost scanned a sticker QR at a stall that belonged to someone else.

UPI is fast — that speed helps shops and helps thieves. Slow eyes beat fast thumbs.

What you need to know

Pay vs collect: when you pay, you send money. When you approve a collect, you also send money. PIN: UPI PIN is like your card PIN — nobody from a bank calls to ask for it.

UPI red flags

  • Stranger asks you to approve a collect for a refund — Decline
  • You pay a known shop after checking the name — Normal use
  • Someone wants your UPI PIN “to reverse a payment” — Scam

How to do it (step by step)

  1. Open only your official UPI app (bank app / PhonePe / Google Pay / Paytm etc. from the real store).
  2. For collect requests: read who is asking and why; decline if unexpected.
  3. For payments: check payee name spelling and amount before entering PIN.
  4. For QR: prefer printed merchant QRs you trust; be careful with stickers that look newly pasted.
  5. Never share screen or PIN with “support” on a call.
  6. If tricked: freeze UPI in the app if available, call bank helpline from the app/card, file on cybercrime.gov.in and call 1930.

Example: Neha declines a refund collect

A WhatsApp message told Neha: “Approve this collect to get your Amazon refund.”

She opened her UPI app, saw a collect from an unknown person, and declined it.

She checked Amazon’s official app orders — no refund step needed a collect.

Second example: Amit now reads the payee name aloud before every PIN entry after his loss; he also set a lower UPI daily limit with his bank.

Common mistakes

  • Thinking collect is how refunds arrive.
  • Scanning any QR because a stranger “works at the counter”.
  • Sharing UPI PIN so someone can “help reverse” a transfer.

Trusted places to check

Quick revision

  • Collect = money out.
  • No UPI PIN to anyone.
  • Check name + amount every time.

Ravindra Bagale's Tip

Collect means money out. Real refunds do not need a stranger’s collect approval.

Quick quiz: check what you learned

  1. What does approving a UPI collect request do?

    1. It sends money from your account to the requester
    2. It only receives money into your account as a refund
    3. It locks your UPI PIN so nobody else can pay today
    4. It cancels the last payment without any bank call
    Show answer

    A. Collect approval pays the other side — decline unknowns.

  2. Someone on a call asks for your UPI PIN to reverse a bad pay. You…

    1. Refuse; hang up and call your bank from the official app
    2. Share the PIN once so they can reverse it for you
    3. Approve any collect they send as proof you cooperate
    4. Scan a QR they SMS so the reverse can complete fast
    Show answer

    A. Banks never need your UPI PIN on a call.

Learn more on this site

Short path above. These pages go deeper:

Frequently asked questions

What is this guide about?

It explains everyday safety for: UPI fraud, collect request, PIN, QR, 1930. Plain steps, no IT jargon required.

What is the one rule to remember?

Decline unknown collect requests. Never share UPI PIN. Check name and amount.

Do I need to be a cyber expert?

No. These steps are for parents, students, shoppers and anyone who uses a phone.

Where do I report if something already went wrong?

India: 1930 and cybercrime.gov.in. US: reportfraud.ftc.gov. UK: Action Fraud. Also tell your bank or the platform quickly.