Fake Support Call Scams via UPI
How fraudsters impersonating bank and telecom support agents trick Indian consumers into sending UPI payments.
Part of: Fake Tech Support Calls
Last reviewed: 1 June 2026
India's Unified Payments Interface (UPI) enables instant bank-to-bank transfers using a simple mobile app. Its frictionless design — designed to accelerate legitimate transactions — also makes it the primary tool for customer-support impersonation fraud. Fraudsters call victims, claim to be from their bank, NPCI, or a telecom operator, and use urgency around account suspension or KYC expiry to extract UPI transactions.
Unlike credit-card chargebacks, UPI payments authorised by the account holder are treated as valid instructions by the banking system. Reversals require a dispute process that can take weeks, with no guarantee of success.
How this scam works on UPI
The scammer calls using a number that may be spoofed to resemble the victim's bank helpline. They claim the victim's account is under review, their UPI ID is expiring, or a refund is being processed that requires 'verification'. The victim is directed to open their UPI app and either approve an incoming collect request or scan a QR code — both of which initiate a debit from the victim's account, not a credit.
In the collect-request variant, the scammer sends a UPI collect request for a nominal amount (often ₹1) framed as a 'verification transaction', then immediately sends a larger request when the victim's guard is down. In the QR code variant, the victim scans a code and enters a PIN believing they are receiving money — UPI QR codes only initiate payments, never receipts.
Common red flags
- Unsolicited call claiming to be from your bank asking you to perform any UPI action
- Instruction to 'receive money' by scanning a QR code or approving a collect request
- Request for your UPI PIN, OTP, or CVV over the phone
- Caller creates urgency around account suspension, KYC expiry, or an unclaimed refund
- A UPI collect request arrives immediately after or during the call
- Caller asks you to download a remote-access app such as AnyDesk or TeamViewer
How to protect yourself
- Your bank will never ask for your UPI PIN or OTP over the phone — hang up if this is requested
- Scanning a QR code always initiates a payment from your account; it cannot receive money
- Do not approve any UPI collect request you did not yourself initiate
- Verify suspicious calls by hanging up and calling your bank's official number from the back of your card
- Register for UPI transaction alerts so you see debits in real time
- Never install remote-access software at the request of a caller — this hands full device control to the fraudster
How to report it
- Report to the National Cybercrime Reporting Portal at cybercrime.gov.in or call 1930
- Raise a dispute with your bank through the UPI app within 30 days of the transaction
- Report the fraud to NPCI through the BHIM app feedback channel with transaction reference details
Frequently asked questions
Can UPI payments be reversed after a scam?
Banks have a dispute-resolution process under NPCI guidelines, but reversal is not automatic. If you authorised the payment yourself — even under deception — the bank may decline the reversal claim. File with cybercrime.gov.in and your bank simultaneously to preserve your claim, and report the recipient VPA (Virtual Payment Address) to NPCI.