Ghotala.wtf
English

Choose your language

Report a new scam

Choose your language

All languages

UPI PIN Harvesting / Deceptive Authorization

In short

A fraudster tricks the victim into entering a UPI PIN under a false purpose The objective is typically to authorize a debit or expose authentication in a fraudulent flow.

What it is

The PIN entry is described as necessary to receive, verify, refund or unblock money. The victim is then pushed to enter the UPI PIN in a flow initiated by the fraudster.

How it starts

A fraudster tricks the victim into entering a UPI PIN under a false purpose.

What they tell you

The PIN entry is described as necessary to receive, verify, refund or unblock money

What they want you to do

Enter the UPI PIN in a flow initiated by the fraudster

How you lose money

authorize a debit or expose authentication in a fraudulent flow

What happens next

After the first successful step, the fraudster may demand more money/information, deepen account or device access, or disappear.

Warning signs

confusion | trust | urgency | UPI PIN social engineering

Where this is documented

India — officially documented by an Indian authority/regulator

How to avoid it

Remember that a UPI PIN authorizes a debit; verify collect requests and QR codes before approving; do not install screen-sharing or SMS-forwarding apps at a stranger's request.

If it already happened

Contact the bank/payment provider immediately if money moved; report financial cyber fraud promptly via 1930 and cybercrime.gov.in; preserve messages, transaction IDs, phone numbers and URLs.

Sources

Published documents this page draws on.

Already sent money or shared something?

What to do now

UPI PIN Harvesting / Deceptive Authorization — Scam types