Focused guide

Fake Support Call Scams via UPI

How fraudsters impersonating bank and telecom support agents trick Indian consumers into sending UPI payments.

Last reviewed: 1 June 2026

India's Unified Payments Interface (UPI) enables instant bank-to-bank transfers using a simple mobile app. Its frictionless design — designed to accelerate legitimate transactions — also makes it the primary tool for customer-support impersonation fraud. Fraudsters call victims, claim to be from their bank, NPCI, or a telecom operator, and use urgency around account suspension or KYC expiry to extract UPI transactions.

Unlike credit-card chargebacks, UPI payments authorised by the account holder are treated as valid instructions by the banking system. Reversals require a dispute process that can take weeks, with no guarantee of success.

How this scam works on UPI

The scammer calls using a number that may be spoofed to resemble the victim's bank helpline. They claim the victim's account is under review, their UPI ID is expiring, or a refund is being processed that requires 'verification'. The victim is directed to open their UPI app and either approve an incoming collect request or scan a QR code — both of which initiate a debit from the victim's account, not a credit.

In the collect-request variant, the scammer sends a UPI collect request for a nominal amount (often ₹1) framed as a 'verification transaction', then immediately sends a larger request when the victim's guard is down. In the QR code variant, the victim scans a code and enters a PIN believing they are receiving money — UPI QR codes only initiate payments, never receipts.

Common red flags

Unsolicited call claiming to be from your bank asking you to perform any UPI action
Instruction to 'receive money' by scanning a QR code or approving a collect request
Request for your UPI PIN, OTP, or CVV over the phone
Caller creates urgency around account suspension, KYC expiry, or an unclaimed refund
A UPI collect request arrives immediately after or during the call
Caller asks you to download a remote-access app such as AnyDesk or TeamViewer

How to protect yourself

Your bank will never ask for your UPI PIN or OTP over the phone — hang up if this is requested
Scanning a QR code always initiates a payment from your account; it cannot receive money
Do not approve any UPI collect request you did not yourself initiate
Verify suspicious calls by hanging up and calling your bank's official number from the back of your card
Register for UPI transaction alerts so you see debits in real time
Never install remote-access software at the request of a caller — this hands full device control to the fraudster

How to report it

Report to the National Cybercrime Reporting Portal at cybercrime.gov.in or call 1930
Raise a dispute with your bank through the UPI app within 30 days of the transaction
Report the fraud to NPCI through the BHIM app feedback channel with transaction reference details

Frequently asked questions

I scanned a QR code the caller sent thinking I would receive money — what actually happened?

Scanning any UPI QR code and entering your PIN always initiates a payment out of your account, never a receipt — there is no such thing as a QR code that sends you money. If you completed this action, check your account balance immediately and file a dispute with your bank right away.

How can I tell a real bank call from a fake one before giving any information?

Hang up and call your bank back using the number printed on your card or their official website — never a number the caller gives you, even if it looks correct on caller ID, since numbers can be spoofed. A genuine bank representative will never ask you to approve a UPI collect request or share your PIN or OTP over the phone.

What should I do in the first few minutes after realising I approved a fraudulent UPI transaction?

Call your bank's fraud line immediately to request a block on further transactions and raise a formal dispute, then file a report at cybercrime.gov.in or call 1930 without delay. Reporting within a short window significantly improves the chance the receiving VPA can be flagged before funds are moved further.

Can UPI payments be reversed after a scam?

Banks have a dispute-resolution process under NPCI guidelines, but reversal is not automatic. If you authorised the payment yourself — even under deception — the bank may decline the reversal claim. File with cybercrime.gov.in and your bank simultaneously to preserve your claim, and report the recipient VPA (Virtual Payment Address) to NPCI.

Sources for this guide are listed on the Fake Tech Support Calls page (4 sources).