UPI & Banking Fraud

What is this scam?

UPI and banking fraud is the fastest-growing category of financial crime in India. With over 10 billion monthly UPI transactions, scammers have built sophisticated systems to steal money directly from bank accounts in seconds. These scams exploit the trust people place in digital payment systems and create urgency or confusion at the critical moment of transaction. Losses are often irreversible within minutes.

How it works — step by step

1. 1

   Scammer calls posing as bank customer care, RBI official, or NPCI representative. They claim your account has a problem — KYC pending, suspicious transaction detected, or account about to be blocked.

2. 2

   They ask you to share your OTP, click a link, download a remote access application (AnyDesk, TeamViewer, QuickSupport), or scan a QR code to 'resolve' the issue.

3. 3

   Once you share your OTP or allow remote access, they drain your account within seconds — often transferring money across multiple accounts to make recovery harder.

4. 4

   In the QR code variant — scammer sends a 'collect request' that looks like a payment coming in. When you accept it, money LEAVES your account, not enters it.

5. 5

   In the SIM swap variant — scammer convinces your telecom provider to issue a new SIM for your number, giving them access to all your OTPs.

Common variants (7)

🚩 Red flags — warning signs

• ⚠️Any person or message asking for your OTP — your bank will NEVER ask for your OTP under any circumstances
• ⚠️Request to download AnyDesk, QuickSupport, TeamViewer, or any remote access application
• ⚠️Request to scan a QR code to receive money or a refund — this is technically impossible
• ⚠️Extreme urgency — 'your account will be blocked in 30 minutes' — designed to prevent rational thinking
• ⚠️A caller ID that shows your bank name — caller IDs can be easily spoofed
• ⚠️Links in SMS or WhatsApp asking you to update KYC or claim a reward
• ⚠️Anyone who knows your partial card number or account details — this information can be purchased illegally

✅ What to do if you've been targeted

1. 1HANG UP immediately if someone asks for your OTP — end the call without engaging
2. 2Contact your bank directly using the number on the back of your card — never the number the caller gives you
3. 3Report to your bank WITHIN 3 WORKING DAYS for zero liability full refund under RBI regulations
4. 4Call 1930 (National Cyber Crime Helpline) immediately
5. 5File complaint on cybercrime.gov.in with all evidence — screenshots, call recordings, transaction IDs
6. 6Dispute the transaction through your bank's official app or branch
7. 7File complaint at RBI Ombudsman at cms.rbi.org.in if bank does not respond within 30 days

📋 Official resources & complaint portals

• →cybercrime.gov.in — File complaint
• →Call 1930 — Cyber Crime Helpline
• →cms.rbi.org.in — RBI Ombudsman
• →npci.org.in — NPCI Dispute Portal

⚖️ Legal protection

RBI Master Circular on Customer Protection — Limiting Liability of Customers in Unauthorised Electronic Banking Transactions. 0–3 working days: FULL REFUND. 4–7 working days: PARTIAL REFUND (loss capped at ₹5,000–₹25,000). After 7 days: bank's discretion.