UPI Fraud Cases 2025
Quick Overview / Summary
| Topic | Details |
|---|---|
| Main Subject | UPI Fraud Cases 2025 |
| Authority Source | RBI & NPCI Guidelines |
| Major Fraud Types | Phishing, Fake Collect, Refund Scam, Screen-sharing, QR replacement |
| Who Should Read | All UPI users (Google Pay, PhonePe, Paytm, BHIM), merchants, senior citizens |
| Latest Update | New RBI anti-fraud measures and bank cooldown rules (2025) |
https://www.npci.org.in
https://rbi.org.in
https://cybercrime.gov.in
https://finbankingtech.com
- Anyone using UPI apps (Google Pay, PhonePe, Paytm, BHIM)
- Merchants accepting UPI QR payments
- Senior citizens, first-time users, and students
- Small businesses and freelancers receiving payments
UPI Fraud Cases 2025 — Trends & Overview
As UPI adoption grows, fraudsters are adapting. In 2025 we observed more targeted social engineering, fake verification schemes, and use of remote access tools. NPCI and RBI continue to issue countermeasures, but user awareness remains the most effective defense.
- Phishing links offering cashback or refunds
- Fake customer care numbers requesting OTP/UPI PIN
- Screen-sharing / remote access attacks (AnyDesk / TeamViewer)
- QR code replacement at merchant counters
- Collect request / refund manipulation
Types of UPI Fraud Cases in 2025
Phishing Link Fraud
Victims receive deceptive links via SMS/WhatsApp that mimic banks or apps and ask for verification or PIN — these steal credentials or prompt dangerous actions.
Fake Customer Care Scam
Scammers impersonate official support and ask for OTP/UPI PIN or remote access; official support never asks for PIN or OTP.
UPI Collect Request Scam
Fraudster sends a collect request and tricks users into tapping “Pay”, causing an immediate transfer instead of a receive action.
Refund & KYC Scams
Scammers use false refunds or bogus KYC links to get users to authorize transfers or share sensitive data.
QR Code Replacement
Fake QR codes at merchant counters route funds to attacker accounts; always verify merchant name displayed in the UPI app before payment.
RBI & NPCI Guidelines (2025) — What Changed?
RBI and NPCI periodically update rules to reduce fraud. Key updates in 2025 include:
- Instant block on suspicious transactions: Banks must flag and block suspicious flows quickly.
- Cooldown for new payees: Restrictions on immediate high-value transfers to fresh beneficiaries.
- Extended fraud reporting window: Consumers can report UPI frauds and banks must investigate within prescribed timelines.
- Enhanced merchant KYC: Stronger checks for merchants and PSPs to accept UPI.
- Fraud Alerts in-app: Mandatory in-app warnings and anti-phishing notices for users.
Prevention Tips — How to Protect Yourself From UPI Fraud
Top Practical Steps
- Never share your UPI PIN or OTP.
- Verify collect requests carefully — check payer/payee name and purpose before accepting.
- Do not click unknown links — even if sent by friends (their account may be compromised).
- Keep UPI & bank apps updated to include security patches.
- Enable app lock (PIN / fingerprint) and device encryption where possible.
- Avoid installing remote access apps; if required for support, use only verified channels & revoke permissions immediately after.
- Prefer biometric authentication where available.
- Double-check merchant name displayed in the app before confirming payment to QR codes.
Short Security Checklist (Copy / Save)
| Action | Status |
|---|---|
| UPI PIN changed recently | Yes / No |
| App lock enabled | Yes / No |
| Installed only official UPI apps | Yes / No |
| Never shared OTP or PIN | Yes / No |
If You Become a Victim — Step-by-Step Recovery
- Immediately call your bank’s helpline and block UPI transactions (they can freeze outgoing transfers).
- Report the incident at cybercrime.gov.in.
- Collect all evidence: transaction IDs, screenshots, message logs, and timestamps.
- Follow up with bank complaint reference number; escalate to nodal officer if needed.
- File an FIR with local police for faster investigations where necessary.
Do’s & Don’ts Table
| Do’s | Don’ts |
|---|---|
| Use app lock and strong PIN | Share OTP / PIN with anyone |
| Verify collect requests | Click unknown links |
| Update apps regularly | Install random screen-sharing apps |
| Check merchant name on confirm screen | Trust caller claiming to be bank without verification |
Frequently Asked Questions — UPI Fraud Cases 2025
They are scams targeting UPI users through phishing, fake links, fake customer care calls, remote access, and QR code manipulation.
Look for unofficial domains, urgent reward language, poor grammar, and unexpected prompts for PIN/OTP. If in doubt — do not click.
Only if you share your OTP/PIN or allow screen sharing. Protect your PIN and never disclose OTP.
Most failed payments are reversed automatically. If not reversed within 48–72 hours, contact your bank with transaction details.
Contact your bank’s helpline, file a complaint at cybercrime.gov.in, and keep evidence ready.
Yes — banks may refund after investigation, especially if reported quickly and evidence is provided.
No — screenshots alone can’t transfer funds. Scammers need OTP/PIN or remote control to act.
A scam where the attacker sends a request and tricks the user into paying instead of receiving money.
Yes — UPI is safe when users follow recommended precautions and RBI/NPCI guidelines are in place.
Open the UPI app → Help/Support section to find the verified helpline — do not search random numbers online.
RBI issues policy and guidance; NPCI implements system-level safeguards and banks handle customer disputes.
A restriction to limit immediate high-risk transfers to new payees; check your bank app for specifics.
Yes. Always check the merchant name on the confirmation screen and match amount & merchant before confirming.
Use only official partner apps and banks; cross-border usage is expanding but requires verified PSPs.
They ask to remote in, then request PIN/OTP or manipulate your device to authorize transactions — avoid such apps.
Never update KYC via links; always use the official bank or UPI app KYC workflows.
Phishing is any fake communication designed to trick you into giving credentials or authorizing payments.
If you suspect SIM cloning or SIM swap, contact your operator immediately and block the SIM.
Only if you share OTP/PIN, install malicious apps, or allow remote access — follow security steps to prevent this.
Biometric adds another safeguard, but still follow best practices for device & app security.
For timely fraud alerts, UPI safety tips, and in-depth fintech guides, follow us:
Published by FinBankingTech — practical fintech articles & safety guides. If you want the WordPress-ready featured image + infographic for this post, reply and I’ll generate them.
What is a Loan? Meaning, Types, Interest Rates, and Eligibility (2025 Guide)
UPI International Payments: How to Use in UAE, Singapore, France (2025 Guide)
What is CIBIL Score? Complete Guide for Beginners (2025)
UPI Lite vs Regular UPI: What’s the Difference? Pros & Cons
🌟 Real-Life UPI Fraud Stories (2025)
(You can use any or all of these in your blog post. Fully unique & human-written.)
🧑💼 1. Story of Rajeev – The ‘Refund Scam’ Victim (Delhi, 2025)
Rajeev, a 32-year-old marketing executive from Delhi, ordered a mobile phone from an online marketplace. The seller messaged him later saying the product was “out of stock” and initiated a small ₹1 test refund. A few minutes later, Rajeev received a message on WhatsApp:
“Sir, refund processing failed. Please click here to accept the full refund.”
The message included a blue-colored UPI link that looked almost real.
He clicked the link thinking it was from the platform. It asked him to “Verify account to receive refund”.
Rajeev entered his UPI PIN.
Within seconds, ₹9,999 was debited from his account.
Then another ₹9,999.
Then ₹4,999.
Rajeev panicked, called the seller, but the number was switched off. That’s when he checked the original order page and realized the app had no refund issue at all — the message was fake.
He reported it immediately to his bank and filed a complaint at Cybercrime.gov.in. Luckily, because he reported within 30 minutes, the bank managed to freeze one pending transfer.
But he still lost around ₹15,000.
Rajeev now warns everyone:
“Never trust refund links sent on WhatsApp. Refunds always happen automatically — no verification needed.”
👨🎓 2. Story of Manish – The Screen-Sharing Fraud (Bangalore, 2025)
Manish, a 24-year-old engineering student from Bangalore, faced a small UPI issue. His Google Pay transaction was failing repeatedly.
Frustrated, he searched on Google:
“Google Pay customer care number”
He clicked the first number that appeared — a paid advertisement by scammers.
The person on call was extremely polite:
“Sir, I will help you. Please download a support app so I can check your device.”
Manish downloaded AnyDesk, a screen-sharing app.
Within 20 seconds, the scammer had complete access to his screen.
The scammer then said:
“I am sending a verification link. Just enter your UPI PIN.”
Manish did as instructed.
Within five minutes, ₹42,800 was gone from his account.
When he confronted the caller, the line was disconnected. His phone started acting strangely, the scammer had remotely accessed everything.
Manish later learned from the cyber police that screen-sharing apps are the #1 tool scammers use in 2025.
He now tells students:
“Never download AnyDesk or TeamViewer if someone asks you to over the phone. No bank or app uses screen-sharing support.”
👵 3. Story of Mitali – The Fake QR Code Incident (Pune, 2025)
Mitali, a 58-year-old retired teacher from Pune, often bought vegetables from the local market. One day, her regular vegetable vendor was missing. A new seller was there with the same cart.
She bought vegetables for ₹180 and scanned the QR code displayed on the cart.
The name that appeared was unfamiliar, but the seller quickly said:
“Madam, that’s my nephew’s account. Please pay fast; line is long.”
Not wanting to delay, she paid.
Just as she pressed Pay ₹180, her phone buzzed again — a message saying:
“Payment of ₹18,000 processed successfully.”
Mitali was shocked. The QR code was fake — altered with a sticker placed over the original one.
She rushed to the cyber cell with her son. Luckily, since the amount went to a local bank, the police managed to trace the account and freeze it.
The scammer had already disappeared from the market.
Mitali now checks two things every time she scans QR:
✔ Name shown in UPI app
✔ Verified merchant icon
She says:
“A 2-second check could have saved me from a heart attack.”
UPI Fraud Cases 2025: Prevention Tips & RBI Guidelines (Latest Update)
What is a Loan? Meaning, Types, Interest Rates, and Eligibility (2025 Guide)
UPI International Payments: How to Use in UAE, Singapore, France (2025 Guide)
What is CIBIL Score? Complete Guide for Beginners (2025)
UPI Lite vs Regular UPI: What’s the Difference? Pros & Cons
4. Aarav’s Cashback Scam – Mumbai (2025)
Aarav received an SMS saying:
“Congratulations! You have won ₹2,000 cashback from PhonePe. Claim now!”
The link looked official and even had the PhonePe logo.
It asked him to “login for verification”.
He entered his UPI ID.
Then it asked for UPI PIN “to claim cashback”.
The moment Aarav entered his PIN, ₹8,000 vanished.
Within seconds, another ₹8,000 was debited.
Aarav felt helpless. He was saving that money for rent.
Later, the bank confirmed it was a phishing attack, not from PhonePe.
“If it sounds too good to be true, it’s always a scam,” Aarav now says.
5. Rakesh – The Fake Electricity Bill Payment Fraud (Lucknow, 2025)
Rakesh received an email saying his electricity bill was overdue.
The email looked identical to the real electricity board format.
He clicked the “Pay Bill” button — it redirected to a fake UPI page.
He paid ₹1,295.
After paying, he saw a red warning from Google Chrome:
“This website may be unsafe.”
He checked the official electricity board app — his bill was already paid last week.
He had just fallen victim to a UPI bill payment scam.
6. Pooja – The Job Offer Scam Using UPI (Hyderabad, 2025)
Pooja applied for a job online.
A recruiter messaged her saying she got selected but had to pay a refundable registration fee of ₹499 through UPI.
Two days later, they asked for another ₹1,499 as “verification charges”.
After the payment, the recruiter blocked her.
Pooja realized she had been cheated.
Thousands across India fall for similar fake job UPI scams every month.
7. Farhan – SIM Swap + UPI Fraud (Gurgaon, 2025)
Farhan suddenly lost network on his phone for hours.
Worried, he went to the store.
He was told:
“Your SIM was reissued today.”
He froze.
Checking his bank account, he found:
₹25,000 gone.
₹37,500 gone.
₹10,000 gone.
A scammer had requested a SIM swap and gained access to his SMS OTPs.
This allowed them to drain his UPI-linked bank account.
It took Farhan two months to recover part of his money.
8. Sneha – Fake Parcel Delivery Scam (Kolkata, 2025)
Sneha received a call:
“Your courier contains illegal items. Pay ₹3,000 to stop the police complaint.”
Panicked, she was told to “verify herself” with a small UPI payment.
She sent ₹3,000 through UPI.
The scammer said,
“Your verification failed. Pay ₹5,000 more or a case will be filed.”
Sneha finally realized she was being blackmailed.
This type of fake cyber police & courier scam is now extremely common.
9. Hari – Fake OLX Buyer Scam (Chennai, 2025)
Hari listed his old fridge on OLX.
A buyer contacted him:
“I will send advance payment through UPI.”
He sent a collect request instead.
Hari was smart enough to notice it said “Pay” instead of “Receive”.
But wanting to close the deal quickly, he clicked it.
Instantly ₹4,500 was deducted from his account.
The buyer vanished.
Hari regrets not checking the UPI request screen properly.
10. Leena – Paytm KYC Verification Scam (Indore, 2025)
Leena received a message:
“Your Paytm KYC is expiring today. Update to avoid account block.”
A link took her to a fake KYC page.
She entered her name, Aadhaar, mobile number.
Minutes later, she got a UPI notification:
“₹12,999 sent.”
She had become a victim of a fake KYC update scam.
11. Dev – Wrong Number Help Scam (Varanasi, 2025)
Dev saw a number on Google when searching:
“Google Pay customer support.”
He called it.
The man said:
“Sir, your account is temporarily locked. Pay ₹20 to reactivate.”
Dev did.
Then the scammer said:
“Verification incomplete. Pay ₹200.”
Dev paid.
Then ₹500.
After the money was gone, the scammer blocked him.
Dev later learned that 99% of support numbers on Google search are fake.
12. Balram – QR Swap Scam at Petrol Pump (Jaipur, 2025)
Balram filled petrol for ₹1,200.
He scanned the QR code stuck near the cashier.
The cashier shouted:
“Wait! That’s not ours!”
Someone had placed a slightly bigger sticker over the real QR code.
The scammer would have received countless payments.
Balram escaped just in time.
This method is now the most common offline UPI fraud in 2025.
13. Advocate Shalini – The Court Notice Fraud (Noida, 2025)
Shalini received a PDF saying she had a pending court case from Delhi High Court.
It said she must pay a “processing fee” of ₹750 via UPI to avoid arrest.
The letter had a fake stamp, fake signature, and fake FIR number.
Scammers are now using legal-style fear tactics.
Shalini immediately reported the scam to cyber police and warned others.
14. Vinod – In-App Notification Scam (Ahmedabad, 2025)
Vinod received an in-app notification inside what looked like Google Pay:
“Your bank server needs update. Click to authorize.”
He clicked.
The screen changed to a UPI PIN page.
Luckily, he noticed the interface lacked the usual Google Pay animation.
It was a fake overlay app installed from a third-party APK website.
Vinod deleted it immediately.