Fake Support Call Scams via UPI
How fraudsters impersonating bank and telecom support agents trick Indian consumers into sending UPI payments.
Part of: Fake Tech Support Calls
Last reviewed: 1 June 2026
India's Unified Payments Interface (UPI) enables instant bank-to-bank transfers using a simple mobile app. Its frictionless design — designed to accelerate legitimate transactions — also makes it the primary tool for customer-support impersonation fraud. Fraudsters call victims, claim to be from their bank, NPCI, or a telecom operator, and use urgency around account suspension or KYC expiry to extract UPI transactions.
Unlike credit-card chargebacks, UPI payments authorised by the account holder are treated as valid instructions by the banking system. Reversals require a dispute process that can take weeks, with no guarantee of success.
How this scam works on UPI
The scammer calls using a number that may be spoofed to resemble the victim's bank helpline. They claim the victim's account is under review, their UPI ID is expiring, or a refund is being processed that requires 'verification'. The victim is directed to open their UPI app and either approve an incoming collect request or scan a QR code — both of which initiate a debit from the victim's account, not a credit.
In the collect-request variant, the scammer sends a UPI collect request for a nominal amount (often ₹1) framed as a 'verification transaction', then immediately sends a larger request when the victim's guard is down. In the QR code variant, the victim scans a code and enters a PIN believing they are receiving money — UPI QR codes only initiate payments, never receipts.
Common red flags
- Unsolicited call claiming to be from your bank asking you to perform any UPI action
- Instruction to 'receive money' by scanning a QR code or approving a collect request
- Request for your UPI PIN, OTP, or CVV over the phone
- Caller creates urgency around account suspension, KYC expiry, or an unclaimed refund
- A UPI collect request arrives immediately after or during the call
- Caller asks you to download a remote-access app such as AnyDesk or TeamViewer
How to protect yourself
- Your bank will never ask for your UPI PIN or OTP over the phone — hang up if this is requested
- Scanning a QR code always initiates a payment from your account; it cannot receive money
- Do not approve any UPI collect request you did not yourself initiate
- Verify suspicious calls by hanging up and calling your bank's official number from the back of your card
- Register for UPI transaction alerts so you see debits in real time
- Never install remote-access software at the request of a caller — this hands full device control to the fraudster
How to report it
- Report to the National Cybercrime Reporting Portal at cybercrime.gov.in or call 1930
- Raise a dispute with your bank through the UPI app within 30 days of the transaction
- Report the fraud to NPCI through the BHIM app feedback channel with transaction reference details
Frequently asked questions
I scanned a QR code the caller sent thinking I would receive money — what actually happened?
Scanning any UPI QR code and entering your PIN always initiates a payment out of your account, never a receipt — there is no such thing as a QR code that sends you money. If you completed this action, check your account balance immediately and file a dispute with your bank right away.
How can I tell a real bank call from a fake one before giving any information?
Hang up and call your bank back using the number printed on your card or their official website — never a number the caller gives you, even if it looks correct on caller ID, since numbers can be spoofed. A genuine bank representative will never ask you to approve a UPI collect request or share your PIN or OTP over the phone.
What should I do in the first few minutes after realising I approved a fraudulent UPI transaction?
Call your bank's fraud line immediately to request a block on further transactions and raise a formal dispute, then file a report at cybercrime.gov.in or call 1930 without delay. Reporting within a short window significantly improves the chance the receiving VPA can be flagged before funds are moved further.
Can UPI payments be reversed after a scam?
Banks have a dispute-resolution process under NPCI guidelines, but reversal is not automatic. If you authorised the payment yourself — even under deception — the bank may decline the reversal claim. File with cybercrime.gov.in and your bank simultaneously to preserve your claim, and report the recipient VPA (Virtual Payment Address) to NPCI.