Safe UPI and Mobile Payments: Daily Rules That Keep Your Money Yours

UPI changed my life. I no longer carry cash, I no longer wait for change, and I can pay the auto-driver without him pretending he doesn't have a ₹50.

UPI also changed scamming. The same convenience that lets me pay a friend in seconds lets a stranger drain my account in seconds, if I'm careless. Most people I know who lost money to UPI did so because of the same handful of mistakes.

Rule 1: You never enter a UPI PIN to RECEIVE money

This is the single most important sentence in this article. The UPI PIN is for sending money, never for receiving. If anyone — buyer, seller, customer support — tells you to "enter your PIN to receive the payment," they are stealing from you.

When someone genuinely sends you money, you do absolutely nothing. The money just appears.

Rule 2: "Collect requests" go the wrong way

If a stranger sends you a UPI "collect request," approving it sends them money, not the other way around. Scammers send these constantly, often dressed up as refunds, prize money, salary disbursements, or charity payments.

If you ever see a notification asking you to approve a payment you didn't initiate, decline. Always.

Rule 3: Verify the merchant name before paying

Before scanning a QR code or entering a UPI ID, look at the recipient name your app displays. Is it the actual shop or person you're paying? Scammers replace QR codes at restaurants and petrol pumps so payments go to their personal accounts. The merchant name in your app is the easiest tell — if it doesn't match the shop, don't pay.

Rule 4: Customer support never calls you

If your phone rings and someone claims to be from your bank, your UPI app, or any payment service, hang up and call the official number from the back of your card or the official app. Real customer support doesn't initiate calls about "problems with your account" and definitely doesn't ask for OTPs, PINs, or screen sharing.

Speaking of: never install screen-sharing apps (AnyDesk, TeamViewer) at the request of a stranger on a phone call. This has been the most successful scam vector in India for years.

Rule 5: Set a daily transaction limit

Most UPI apps let you set a daily spending limit. Set yours to a number that covers normal usage but would catch a fraudster mid-attempt. ₹10,000 is plenty for most people's daily activity. Higher amounts can be enabled temporarily for specific transactions.

Rule 6: Watch the SMS alerts

Every debit triggers an SMS or app notification. Read each one when it arrives. If you see something you didn't authorise, freeze the affected account immediately and call the bank. Speed is everything — many banks reverse fraudulent transactions reported within 24 hours.

Rule 7: Talk to elders in your family

The single highest-risk group is older relatives who use UPI but didn't grow up around the patterns of digital fraud. A 15-minute conversation about "never share OTP, never approve a request from a stranger, never install apps on someone's instructions" prevents more loss than any antivirus.

UPI is wonderful. With these few habits, it's also safe.