A scammer tells you, “I am sending you money—just approve the request and enter your UPI PIN.” That sentence should make you stop immediately. A UPI PIN is used to authorise money going out of your account, not to receive a normal incoming payment.
NPCI’s fraud-awareness guidance warns users about collect-request and QR-code scams that rely on confusion about how UPI payments work.
What is a UPI collect request?
A collect request is a payment request sent to your UPI account. If you approve it and enter your UPI PIN, you authorise a debit from your bank account.
Collect requests can be legitimate—for example, a merchant may request payment—but you should approve only when you independently recognise the recipient, amount and purpose.
How scammers misuse collect requests
A common pattern appears on online marketplaces. A fake buyer says they will “send” you money, then sends a collect request. They instruct you to enter your UPI PIN to receive the funds. In reality, the PIN authorises the payment in the opposite direction.
Warning signs
- Someone says you must enter a UPI PIN to receive money.
- The amount or recipient name does not match what you expected.
- The caller creates urgency or refuses a normal bank transfer.
- You are asked to approve a ₹1 “test” payment first.
- A stranger sends a QR code claiming it will credit money.
What should you check before approving?
Read the final payment screen. Confirm the amount, UPI ID and recipient name. If the screen says you are paying, believe the screen—not the caller.
Do you need a PIN to receive money?
No. You do not normally enter your UPI PIN just because someone is transferring money to you. The PIN is a transaction-authorisation credential and should never be shared.
What if you already approved a fraudulent request?
Save the transaction reference, report the payment in your app, contact your bank, call the 1930 cybercrime helpline and file a complaint on the official cybercrime portal. Our guide on what to do after a UPI scam explains the sequence.
Other related scam tactics
Scammers may combine collect requests with fake customer support, screen-sharing apps, refund promises or KYC threats. The technology changes, but the goal is the same: make you authorise a payment or reveal credentials.
Final takeaway
If someone says “enter your UPI PIN to receive money,” stop. Read the payment screen, verify the person independently and never approve a request you do not understand.
