Scammers can steal money when you check your UPI balance..!?
A viral whatsapp message warns of a new UPI scam, saying that fraudsters can withdraw money when users check their balance after receiving unexpected deposits. Experts explain whether it is technically possible. A whatsapp message warning about a new UPI scam has gone viral. The message describes a nasty technique called "Jumped", where fraudsters will send a small amount to UPI accounts on PhonePe, google Pay, or Paytm, tricking you into thinking it is a legitimate deposit. A message circulating on whatsapp says, “The moment you enter your PIN to check your balance, it means you have verified his withdrawal request in your account. Your account will automatically approve his withdrawal request and withdraw the money. To protect yourself, the message advises that when you receive an unexpected deposit, you should first enter the wrong PIN to check your balance. This will cancel the withdrawal requests. Once that is done, you can check your balance using the correct PIN. However, let’s see if this is the latest wallet PLATFORM' target='_blank' title='digital-Latest Updates, Photos, Videos are a click away, CLICK NOW'>digital scam to watch out for or another unfounded rumor. Experts explain that they do not believe the claim of “technically possible”. According to a security researcher, the fraudster, in the worst case, can only initiate the payment request using the Unified Payments Interface (UPI), and there is no such thing as a “withdrawal” without approval. However, he added that in all the UPI apps mentioned in the news, checking bank balances and authorizing a collection request are completely different. “They are two independent transactions, and even checking the balance during an active payment request only gets the balance and does not accept or reject the request,” Akshay explained. The cybersecurity expert also explained why UPI users are unlikely to fall for fraud, saying, “UPI apps display a clear notification when a fraudster sends a withdrawal or payment request. Users are not immediately prompted to enter their UPI PIN by clicking on this notification,” he said.
Furthermore, “Instead, the app displays the name of the requester, the requested amount, and a visible ‘Pay’ button. Users are asked to enter their PIN only after clicking 'Pay'." Akshay also debunked another false claim in a widely circulated whatsapp message, which suggested that entering an incorrect PIN on the balance check screen would cancel pending UPI collection requests. He called the claim "completely false." He explained, "Entering the UPI PIN incorrectly 3 times will result in a 24-hour lock-out at the account level and will not affect any UPI payment requests - until they expire automatically during that window; rather, it will affect legitimate transactions." While the warning about "jumped" UPI scams in whatsapp messages is an exaggerated fear, there is growing concern about wallet PLATFORM' target='_blank' title='digital-Latest Updates, Photos, Videos are a click away, CLICK NOW'>digital fraud in India. UPI scams are becoming more common as fraudsters continue to devise new ways to exploit users’ trust.
From phishing attacks to fake payment links, these scams can take many forms. As mobile payments continue to grow in popularity, it’s important to stay informed about the real threats and how to protect yourself from these emerging tricks.
Experts highlight several common UPI scams that users should be wary of:
Fake refunds or cashback: Fraudsters often promise cashback or refunds for a previous transaction and then demand money or PIN input to “activate” the offer. Security expert Akshay warned, “This results in unauthorized withdrawals. It’s crucial to independently verify cashback or refund claims with the company or service provider involved.
Fake QR Code Scams: Fraudsters create fake QR codes that look like legitimate ones. When these codes are scanned, users are redirected to fraudulent websites or payment apps, which helps the fraudsters steal financial information or get money directly.
How to stay safe?
As our trust in wallet PLATFORM' target='_blank' title='digital-Latest Updates, Photos, Videos are a click away, CLICK NOW'>digital payment apps increases, so does the sophistication of scams targeting users. Users are advised to always verify the amount and recipient before approving any UPI transaction.
However, let’s see if this is the latest wallet PLATFORM' target='_blank' title='digital-Latest Updates, Photos, Videos are a click away, CLICK NOW'>digital scam to watch out for or another unfounded rumor. Experts explain that they do not believe the claim of “technically possible”. According to a security researcher, the fraudster, in the worst case, can only initiate the payment request using the Unified Payments Interface (UPI), and there is no such thing as a “withdrawal” without approval. However, he added that in all the UPI apps mentioned in the news, checking bank balances and authorizing a collection request are completely different. “They are two independent transactions, and even checking the balance during an active payment request only gets the balance and does not accept or reject the request,” Akshay explained. The cybersecurity expert also explained why UPI users are unlikely to fall for fraud, saying, “UPI apps display a clear notification when a fraudster sends a withdrawal or payment request. Users are not immediately prompted to enter their UPI PIN by clicking on this notification,” he said.
click and follow Indiaherald WhatsApp channel