A notification pops up: "You've received a payment request." Maybe it's from an unknown number claiming to be a buyer for something you listed online, or a stranger saying they sent money by mistake and need it "returned" through a link. The UPI app interface looks completely normal — that's exactly the problem.
1. Remember the one rule that defeats this entire scam
Receiving money through UPI never requires a PIN. Your PIN is only ever needed when you're sending money. Any request that asks you to enter your PIN in order to "accept," "receive," or "claim" a payment is actually a request for you to pay the other person, no matter how it's worded.
2. Be wary of unsolicited requests from strangers
A common version of this scam involves someone claiming to be an online marketplace buyer, or someone who "accidentally" sent you money and wants it back. They'll send a collect request instead of simply asking you to share your own UPI ID for them to pay you directly.
3. Read the request screen carefully before approving anything
Before tapping approve, check what the screen actually says — does it show money going out or coming in? Scam collect requests are designed to be approved quickly, often while you're distracted or mid-conversation with the person contacting you.
4. Never scan a QR code to "receive" money
Scanning a QR code and entering your PIN is always a payment, never a way to receive one. If someone asks you to scan a code to get a refund, prize, or payment, that request itself is the scam.
5. Verify unfamiliar requests before responding at all
If you don't recognize the person or reason behind a payment request, it's fine to simply decline or ignore it. You can always ask the person to share their UPI ID so you can pay them directly, on your own terms, if a payment is genuinely owed.
A quick checklist before you approve any UPI request
- Am I being asked to enter my PIN to "receive" money?
- Do I recognize who sent this request and why?
- Is this framed as an urgent refund, prize, or accidental transfer?
- Am I being asked to scan a QR code to get money rather than send it?
- Would I rather just ask this person to send money to my UPI ID directly?
Any "yes" among the first four is a strong reason to decline and verify before doing anything else.
Conclusion
UPI itself is a secure, widely used payment system — the vulnerability isn't in the technology, it's in how convincingly a "collect" request can be dressed up as an incoming payment. Once you know that receiving money never needs your PIN, this entire category of scam loses its power.
This trick shares the same urgency-plus-money pattern as fake bank alerts — if you want to see it in a different context, our guide on checking a bank message covers a closely related version.
Got a payment request or message you're unsure about? Paste it into our free checker for a quick first read.
Frequently asked questions
Can someone take money from my account just by sending a UPI request?
No. A UPI collect request only takes money if you approve it and enter your UPI PIN. Simply receiving a request does nothing on its own — the danger is in approving it without reading what it actually says.
Why do scammers send a "collect" request instead of asking for money directly?
Because UPI apps show collect requests with buttons that look similar to approving a normal payment, and if you're not paying close attention, it's easy to tap "accept" without realizing you're the one being charged.
Do I ever need to enter my UPI PIN to receive money?
No. Receiving money through UPI never requires your PIN. If any request asks you to enter your PIN to "receive" a refund, cashback, or payment, it's actually a request to send money out of your account.
What should I do if I approved a fake UPI request by mistake?
Contact your bank immediately to report the transaction, use your UPI app's dispute or report option if available, and file a complaint with your country's cybercrime reporting portal.
Further reading
Got a payment request you want a second opinion on?
Run it through the checker