Safeguarding Your Digital Wallet

As digital payments continue to surge in popularity for everyday transactions, financial fraudsters are deploying increasingly sophisticated methods to exploit unsuspecting users. From fake payment requests and caller impersonation to remote access scams, cybercriminals are constantly finding new vulnerabilities.

In response to this growing threat landscape, digital payment major PhonePe has issued an urgent advisory detailing three mandatory security checks every user must follow to protect their bank accounts.

1. Never Enter Your UPI PIN To Receive Money

The most fundamental rule of Unified Payments Interface (UPI) security is understanding how the authorization process works. A UPI PIN is exclusively required to authorize outgoing payments from your bank account—never to receive funds.

Fraudsters frequently send fake collect requests, fraudulent payment prompts, or QR codes under the guise of transferring money or issuing a refund. Users must carefully scrutinize any transaction prompt. Entering a UPI PIN on an incoming request effectively authorizes a direct debit from your account to the scammer.

2. Verify The Recipient's Name Before Completing Transactions

Before finalizing any digital transfer, users should meticulously check the registered bank account name displayed on the payment confirmation screen.

Scammers often utilize misleading UPI IDs or fake profiles designed to impersonate family members, friends, or verified commercial entities. If the displayed name fails to match the intended recipient, individuals are advised to halt the transaction immediately and verify the details independently through alternative communication channels.

3. Guard Sensitive Credentials and Avoid Unknown Links

Cybercriminals frequently impersonate bank officials, telecommunication representatives, or customer support personnel to extract sensitive financial information. Users must never disclose One-Time Passwords (OTPs), UPI Pins, or banking credentials over phone calls, text messages, or emails.

Furthermore, users should strictly refrain from clicking on unverified links or installing remote screen-sharing applications at the behest of unknown callers. These applications grant malicious actors complete access to mobile devices, enabling them to compromise sensitive data and drain bank accounts.

PhonePe has also highlighted the growing menace of 'money mule' scams, where individuals are unknowingly tricked into receiving and forwarding funds tied to illicit operations. Participating in such transfers, even inadvertently, can lead to frozen bank accounts and severe legal repercussions.

Immediate Steps If You Fall Victim

Time is critical if an account has been compromised or unauthorized transactions have occurred. Users can immediately raise complaints through the designated Help section within the mobile application or contact official customer support lines.

For broader incidents, victims are strongly encouraged to report cyber fraud directly to the national cybercrime helpline at 1930 or lodge an official complaint via the National Cyber Crime Reporting Portal. Suspicious communications and fraudulent messaging activity can also be flagged through the Chakshu facility on the Sanchar Saathi portal.