UPI Refund Scam
The UPI Refund Scam is a prevalent threat in India, targeting unsuspecting individuals through various channels like WhatsApp and SMS. Scammers impersonate bank officials or customer service agents, creating a sense of urgency to trick victims into sharing sensitive information. This guide will equip you with the knowledge to recognize and avoid these scams, ensuring your hard-earned money remains safe.
What is this scam?
The UPI Refund Scam involves fraudsters pretending to be bank representatives or customer service agents, claiming that you are eligible for a refund on a transaction made via UPI. They often contact victims through WhatsApp, SMS, or phone calls, creating a sense of urgency to prompt immediate action.
Scammers may ask for your personal details, including your UPI PIN, OTP, or even request you to download a remote access app like AnyDesk. They may also send fake payment screenshots to make their claims seem legitimate.
The scam typically escalates quickly, with the scammer insisting that you must act fast to secure your refund. This pressure tactic is designed to overwhelm victims, making them more likely to comply without thinking critically about the situation.
Understanding the mechanics of this scam is crucial for protecting yourself. By recognizing the signs and knowing how to respond, you can safeguard your finances against these malicious tactics.
60-second explainer
How it happens in real life
Ravi, a 55-year-old man from Pune, received a WhatsApp message claiming he was eligible for a UPI refund of ₹5,000 due to a failed transaction. The message included a link to a fake website that looked like his bank's portal.
When Ravi clicked the link, he was contacted by a person who claimed to be a bank executive. The scammer told him that he needed to verify his identity by providing his UPI PIN and OTP. Feeling anxious about losing the refund, Ravi complied, thinking he was following legitimate instructions. Unfortunately, he ended up losing his money to the scammer.
Got a suspicious call, message, or link? Do this immediately
These steps apply to almost every fraud in India — UPI scams, fake bank calls, job offers, investment tips, courier fraud, and government impersonation. Follow them before you share anything or pay anyone.
Stop — do not engage further
- Hang up the call immediately — do not stay on the line out of politeness or fear.
- Do not reply to the SMS, WhatsApp, Telegram, or email — even to say “wrong number”.
- Do not click any link, QR code, or attachment they sent.
- Do not call back numbers they give you — use only official numbers from your bank card or website.
- If they claim urgency (“account blocked in 2 hours”), treat that as a scam signal and pause.
- Tell the caller you will verify independently and end the conversation.
Never share or allow
- Never share OTP, PIN, CVV, ATM PIN, or net-banking password — not even with “bank staff” or “police”.
- Never approve a UPI collect request or enter UPI PIN to “receive” a refund — receiving money never needs your PIN.
- Never install AnyDesk, TeamViewer, QuickSupport, or unknown APK files they ask you to download.
- Never enable screen sharing or “remote help” on your phone or laptop for an unknown caller.
- Never send photos of Aadhaar, PAN, passport, or bank statements to an unsolicited contact.
- Never transfer money for “verification”, “processing fee”, “customs charge”, or “KYC update”.
- Never share your SIM or swap SIM at a shop because someone on the phone told you to.
Block, delete, and disconnect
- Block the phone number on your dialer and on WhatsApp.
- Leave and report suspicious WhatsApp / Telegram groups.
- Delete any app or APK you installed because they asked — uninstall fully, not just remove icon.
- Mark the email as spam/phishing and delete it after saving evidence.
- Turn off “Unknown caller” callbacks and do not add them to contacts.
- If you joined a video call with them, leave immediately and close the app.
Save evidence before you delete anything
- Screenshot the full chat, including phone number, profile name, and date/time.
- Save SMS with sender ID and message text.
- If safe and legal in your state, record a short clip of a repeat call for reporting.
- Note the exact time, amount (if any), UPI ID, and transaction reference number.
- Save emails with headers visible; forward a copy to yourself before deleting.
- Photograph QR codes or payment pages they sent — do not scan them.
- Write down what they claimed (bank name, department, officer name) while memory is fresh.
Verify independently — never through them
- Call your bank using the toll-free number printed on your debit/credit card or passbook.
- Visit your bank branch in person if large money or KYC is mentioned.
- Open your bank or UPI app manually — never via their link — and check for alerts.
- Search the organisation name on its official .gov.in or .co.in website, not Google ads.
- Ask a trusted family member or friend before sending money or sharing OTP.
- Use our message checker if you are unsure about a text or WhatsApp forward.
Protect your accounts and devices
- Change net-banking and UPI PINs from a device you trust — not one they had you install software on.
- Enable transaction limits and alerts in your bank app and UPI app (Paytm, PhonePe, GPay, etc.).
- If you shared OTP or logged in on a suspicious link, call the bank fraud hotline to block cards/UPI.
- Run a malware scan if you installed an unknown app; consider factory reset if remote access was granted.
- Turn on two-factor authentication where available; use biometrics for UPI where supported.
- Check your bank SMS history for unknown debits in the last 48 hours.
Report and warn others
- Call 1930 (National Cyber Crime Helpline) if money was lost or you shared OTP/PIN.
- File a report at cybercrime.gov.in — keep the acknowledgement number.
- Inform your bank’s fraud desk and request account/card/UPI freeze if needed.
- Warn family members — scammers often target the same household next.
- Report the number to your telecom provider’s spam reporting channel (1909 for SMS spam).
- Share a warning in your local community so others do not fall for the same script.
Also specific to this scam type
- Do not share your OTP or UPI PIN with anyone.
- Block the number immediately if you suspect a scam.
- Delete any suspicious apps that were suggested.
- Save screenshots or recordings of the conversation for evidence.
- Verify the claims through your bank's official channels.
- Inform your family about the scam attempt to raise awareness.
- Do not click on any links provided by the scammer.
- Stay calm and do not rush into any decisions.
- Report the incident to your bank and local authorities.
- Do not engage further with the scammer.
How it works — step by step
-
Initial Contact
The scam begins with the victim receiving a message or call from someone claiming to be a bank representative. They usually state that the victim is eligible for a refund on a recent UPI transaction.
-
Creating Urgency
The scammer creates a sense of urgency, insisting that the victim must act quickly to secure their refund. This pressure often leads victims to make hasty decisions.
-
Requesting Personal Information
The scammer asks for sensitive information, such as the victim's UPI ID, OTP, or even their UPI PIN, claiming it's necessary for processing the refund.
-
Sending Fake Payment Screenshots
To make their claims seem credible, scammers often send fake payment screenshots showing that the refund is being processed, further convincing the victim of their legitimacy.
-
Installing Remote Access Apps
In some cases, scammers may ask victims to download remote access applications like AnyDesk, claiming they need to access the victim's phone to complete the refund process.
-
Finalizing the Scam
Once the victim shares their sensitive information or installs the app, the scammer gains access to their bank account, leading to unauthorized transactions and loss of money.
Why this scam works
The UPI Refund Scam succeeds due to various psychological tactics employed by scammers. They create a sense of urgency, making victims feel pressured to act quickly without thinking critically. This urgency often leads to hasty decisions that can result in financial loss.
Additionally, scammers exploit emotions such as fear and greed. By promising a refund, they tap into the victim's desire to reclaim lost money, making them more susceptible to manipulation. Impersonating authority figures, like bank officials, further enhances their credibility, causing victims to trust them blindly.
Who is most at risk
Individuals who are not tech-savvy, seniors, and first-time smartphone users are often targeted in this scam. They may lack the knowledge to recognize red flags and may be more trusting of authority figures, making them vulnerable to manipulation.
What scammers say to pressure you
- Sir, aapka account block ho jayega agar aap refund nahi lete.
- OTP verification mandatory hai, bina OTP ke refund nahi ho sakta.
- Aapko bas ek link par click karna hai, sab kuch safe hai.
- Agar aapne refund nahi liya, toh aapko loss hoga.
- Yeh sirf aapke liye special offer hai, jaldi karein.
- Kya aapne AnyDesk install kiya? Yeh zaroori hai refund ke liye.
Warning signs
Never do this
How to verify before you trust
How to stay safe
If you suspect a scam right now
Emergency recovery
Call the National Cyber Crime Reporting Helpline at 1930.
Report the incident on the official cybercrime portal: https://cybercrime.gov.in.
Inform your bank about the unauthorized transaction.
Change your UPI PIN and any other passwords immediately.
Monitor your bank account for any further suspicious activity.
File a complaint with your local police station if necessary.
Keep a record of all communications regarding the scam.
Notify your family and friends about the scam to prevent them from falling victim.
Consider placing a fraud alert on your credit report.
Follow up with your bank regarding the status of your complaint.
Call 1930 · cybercrime.gov.in
Official reporting
FAQ
- What should I do if I shared my OTP with a scammer?
- Immediately contact your bank to report the incident and change your passwords. Monitor your account for any unauthorized transactions.
- How can I identify a scam call?
- Scam calls often pressure you for immediate action, request personal information, and use generic greetings. If it feels suspicious, verify through official channels.
- Is it safe to click on links in messages from unknown numbers?
- No, clicking on links from unknown sources can lead to phishing sites or malware. Always verify the sender before clicking.
- Can I get my money back if I fall for a scam?
- It depends on the situation. Report the incident to your bank and local authorities immediately to increase your chances of recovery.
- What are some common signs of a UPI refund scam?
- Common signs include unsolicited messages claiming you are eligible for a refund, requests for OTP or UPI PIN, and pressure to act quickly.
- Should I trust messages that look like they are from my bank?
- Always verify such messages by contacting your bank directly through official channels. Do not use any contact information provided in the message.
- What should I do if I receive a suspicious refund request?
- Do not engage with the sender. Verify the request with your bank and report it if necessary.
- How can I protect myself from online scams?
- Stay informed about common scams, use strong passwords, enable two-factor authentication, and be cautious about sharing personal information.
- What if I receive a call from someone claiming to be from the police regarding a scam?
- Real police officers will not ask for money or personal information over the phone. Verify their identity by calling your local police station.
- Are seniors more vulnerable to scams?
- Yes, seniors may lack familiarity with technology and online scams, making them more susceptible to fraud. It's important to educate them about these risks.