Introduction
UPI has changed the way people send and receive money in India. A few taps can transfer money within seconds. But the same convenience has also created new opportunities for fraudsters.
A scammer may pretend to be a bank employee, buyer, seller, delivery agent, or customer support executive. They may ask you to scan a QR code, enter your UPI PIN, or click a payment link. Once you approve the transaction, the money can leave your account immediately.
So, what happens if you lose money through UPI fraud? Can you get your money back?
The answer depends on how the fraud happened, how quickly you reported it, and whether the bank or payment service provider finds any customer negligence.
What Is UPI Fraud?
UPI fraud happens when someone uses deception or unauthorised access to take money from your bank account through UPI. Fraudsters often use social engineering instead of directly breaking into a banking system.
For example, a fraudster may call and claim that they need to verify your bank account. They may ask for your UPI PIN or OTP. Another common trick involves fake QR codes. A person may tell you that scanning the code will help you receive money. In reality, scanning and approving the transaction may send money from your account.
The Reserve Bank of India warns customers not to share their PIN, OTP, passwords, or other banking credentials. It also advises customers not to click suspicious links or scan unknown QR codes.
Can You Get Your Money Back After UPI Fraud?
You may be able to recover the money, but a refund is not automatic in every case.
The RBI has rules that limit customer liability for certain unauthorised electronic banking transactions. The customer’s liability can depend on the reason for the loss and how quickly the customer reports the transaction to the bank.
If the fraud results from a security failure on the bank’s side or a third-party breach where the customer has no fault, the customer may have zero or limited liability in situations covered by the RBI rules.
However, the situation can change when the customer shares payment credentials. If a customer gives a fraudster their PIN, OTP, password, or other security information, the customer may bear the loss until they report the transaction to the bank. Losses that occur after the customer reports the unauthorised transaction may be treated differently under the applicable rules.
This is why reporting UPI fraud immediately is extremely important.
What Should You Do After a UPI Scam?
Act as soon as you notice the unauthorised payment. Contact your bank through its official customer service or fraud-reporting channel. Tell the bank that the transaction was unauthorised and ask it to register your complaint.
You should also report the incident to the National Cyber Crime Reporting Portal or the cybercrime helpline 1930. The RBI itself advises customers to report fraud through these channels.
When making a complaint, provide the transaction ID, UTR number, amount, date, time, UPI ID, screenshots, and any other information connected with the fraud. If the fraudster contacted you by phone, SMS, WhatsApp, or email, preserve those records as well.
Do not delete messages or screenshots. They may help investigators trace the transaction.
What Happens After You Report the Fraud?
Your bank can investigate the transaction and examine how the payment occurred. It may also coordinate with other banks or payment participants involved in the transaction.
UPI involves several participants, including the UPI app, payer bank, payee bank, and payment service providers. This means a fraudulent transaction may involve more than one institution.
Reporting the fraud quickly may also help authorities take action before the money moves through additional accounts.
However, you should understand that reporting a UPI fraud does not guarantee recovery. The possibility of recovering the money depends on the facts of the case and whether the funds can be traced or stopped.
What If the Bank Rejects Your Complaint?
If your bank does not resolve your complaint, you can use its internal grievance process and ask for the matter to be reviewed.
If the regulated entity does not resolve the complaint within the applicable process or you remain dissatisfied, you may approach the RBI Integrated Ombudsman Scheme, where the complaint falls within its scope. The RBI provides a complaint mechanism for customers of covered regulated entities.
Keep your bank complaint number and all supporting documents. These records can help when you escalate the matter.
How Can You Stay Safe From UPI Fraud?
Prevention is often easier than recovering money after a scam. Never share your UPI PIN or OTP with another person. Your UPI PIN is used to authorise payments, not to receive money.
Be careful when someone asks you to scan a QR code. Before approving a payment, check the recipient’s details and the amount shown on your screen.
You should also avoid clicking unknown links or installing apps at the request of strangers. Fraudsters often create a sense of urgency to make people act without checking the details.
Conclusion
UPI fraud can cause serious financial loss, but you should not assume that your money is automatically gone forever. You may have a right to protection or compensation in certain unauthorised transaction cases, depending on the circumstances and how quickly you report the fraud.
If you notice an unauthorised UPI transaction, act immediately. Contact your bank, report the incident through the cybercrime reporting system, and preserve all evidence. If the bank does not resolve the complaint, explore the available grievance-redressal mechanisms.
Most importantly, never share your UPI PIN, OTP, or banking credentials with anyone. A few seconds of caution can prevent a major financial loss.
