UPI Collect Request Fraud: Why You Never Need a PIN to Receive Money
Paise receive karne ke liye UPI PIN chahiye?
Never. This is the single most useful fact about UPI safety. Your UPI PIN works like a signature on a cheque: it authorises money to leave your account. When someone sends you money, it arrives on its own. You do not enter a PIN, scan anything or approve any request.
| Action | Money goes | PIN needed? |
|---|---|---|
| Someone sends to your UPI ID or number | Into your account | No |
| You approve a collect request | Out of your account | Yes |
| You scan a QR code and enter the PIN | Out of your account | Yes |
| You pay a shop or person | Out of your account | Yes |
So if any message, call or screen says “enter PIN to receive”, you already know it is fraud.
UPI collect request kya hai?
A collect request, also called a payment request, is a feature that lets a person or business ask you for money. A shop might send one at checkout. It appears in your UPI app with an amount and buttons to pay or decline. If you approve it with your PIN, the amount is debited from your account.
Scammers abuse this feature by labelling the request so it looks like money coming to you: “Refund”, “Payment received”, “Cashback”. The screen still asks for your PIN because you are paying. Read the screen slowly: there is no button on a request screen that brings money in.
Common UPI collect and QR code scams in India
- Fake OLX or Facebook buyer. You list a sofa or a bike. A buyer, often claiming to be in the army, agrees at once and sends a “payment request” for you to accept.
- Refund desk. You search for a customer care number, call a fake one, and the “agent” sends a request or QR code to process your refund.
- QR to receive. A buyer sends a QR code on WhatsApp and says scanning it will credit your money.
- Verify with ₹1. You are asked to send ₹1 or ₹10 to “verify” your account, and promised double back. The next request is much larger.
- Fake tax or prize refund. A message says an income tax refund or a prize is approved, and a small “processing” payment to a UPI ID is needed first.
UPI fraud ho gaya to kya kare?
If you approved a request or scanned a code and money left your account, follow these steps in order. Speed matters: quick reports give banks the best chance to hold the money.
- Call 1930 immediately and report the fraud.
- File a complaint on cybercrime.gov.in with the UTR number, amount, time and the UPI ID that received your money (it is shown in your app’s transaction details).
- Call your bank on the number printed on your card or in its app, and ask them to block UPI if needed.
- Use the “raise a complaint” or “report a problem” option on the transaction in your UPI app as well.
- Block the sender and report the number on Chakshu (sancharsaathi.gov.in/sfc).
- Keep screenshots of the chat, the request and the transaction. Do not delete anything.
Under RBI rules on unauthorised electronic transactions, reporting to your bank within three working days limits a customer’s liability where the fault is neither the customer’s nor the bank’s. Read our first hour after cyber fraud checklist for the complete plan.
Safe UPI habits for buyers, sellers and families
- To get paid, share only your UPI ID or mobile number. Ask the buyer to send the money.
- Check the payer name your app shows. A “refund” from an individual’s name is not a refund.
- Never scan a QR code someone sends you to “receive” money.
- Decline any request you were not expecting, and block the sender.
- Get customer care numbers only from the official app, never from search results or social media.
- Set a daily UPI limit in your app if you rarely make large payments.
TipTeach children and older parents the five-word rule: “PIN means money goes out.” It covers almost every UPI scam.
Fake payment screenshot and “sent by mistake” tricks
Two other UPI tricks often travel with collect request fraud. Both rely on you trusting what someone shows you instead of what your own app says.
- Fake payment screenshot. A buyer shows a “payment successful” screen and takes the goods. Shopkeepers should confirm the credit in their own app or soundbox, not on the customer’s phone.
- Sent by mistake. Someone says they sent you money by mistake and asks you to return it, sometimes after sending a collect request labelled as a refund. Check your own bank statement. If money really arrived, your bank can guide you on returning it safely.
The rule is the same: trust only the balance and transaction history inside your own bank or UPI app.
Frequently asked questions
Do I need a UPI PIN to receive money?
No. You never need a UPI PIN, a QR scan or an OTP to receive money. The PIN is only used to pay or to approve money going out of your account.
What is a UPI collect request?
It is a request from someone asking you to pay them. If you approve it with your PIN, the amount is debited from your account. Decline any request you did not expect.
The buyer says he is in the army. Is that a scam?
Fake army officer buyers and sellers are a very common OLX and rental scam. Meet in person, take payment to your UPI ID, and never enter a PIN or scan a code to “verify”.
Can a UPI payment be reversed?
A completed UPI payment cannot simply be cancelled by you. That is why reporting fast matters: call 1930 and your bank at once so they can try to hold the money in the receiving account.
How do I report a UPI fraud number?
Report money lost on 1930 and cybercrime.gov.in. Report the scam call or message itself on Chakshu at sancharsaathi.gov.in/sfc, and block the sender in your UPI app.
Sources
- NPCI: Unified Payments Interface (UPI)
- National Cyber Crime Reporting Portal (helpline 1930), Ministry of Home Affairs
- Sanchar Saathi: Chakshu, report suspected fraud calls, SMS and WhatsApp messages
- RBI: limiting customer liability in unauthorised electronic banking transactions
Last checked: . Rules, amounts and dates change. Please confirm on the official website before you act.
This guide is general safety information, not legal advice. Helplines, portals and bank rules can change: follow the instructions of your bank, the police and cybercrime.gov.in.