Women Life School

How to Stay Safe from UPI and Online Fraud: A Guide for Women

Money · 8 min read · 3 October 2026

You can stay safe from UPI and online fraud by following one golden rule: you never need to enter your UPI PIN or share an OTP to receive money. If anyone asks for your PIN, OTP, card number or CVV, for any reason, it is a fraud, even if they sound polite or say they are from your bank.

The good news is that almost all online frauds use a few simple tricks. Once you know them, they are easy to spot.

The call Meenakshi almost believed

Meenakshi lives in Jaipur and runs a small home bakery. She takes orders on WhatsApp and gets most payments on UPI.

One afternoon she got a message: "Madam, I want to order 5 kg of cake for my daughter's birthday. I have sent you the money, but by mistake I sent too much. Please accept the request on your phone and send the extra back."

A payment request popped up on her phone. She was about to tap it and enter her PIN, when she remembered something her daughter had told her: "Mummy, you only type your PIN when money is going out."

She stopped. She checked her bank balance. No money had come in. The "request" was a trap that would have taken ₹4,500 from her account.

"I felt my heart race," she says. "Then I thought, if money is coming in, why would I need a PIN?"

A small note: Meenakshi is a composite character, and the numbers in this chapter are simple examples. Your own situation will depend on how you use your phone and bank.

What is the golden rule of UPI safety?

Remember this one line:

PIN is for paying. Never for receiving.

Whenever a screen asks for your UPI PIN, ask yourself: "Is money going out of my account right now?" If the answer is no, close the screen.

Also remember:

  • Your bank will never call you to ask for your PIN, OTP, CVV or full card number.
  • No genuine company will ask you to download a remote control app on your phone.
  • Real prizes and refunds do not ask you to pay first.

What are the most common online frauds?

Here are the tricks women in India most often report. Read them once, and you will recognise them quickly.

1. The "wrong payment" request

Someone says they sent money by mistake and asks you to return it. Always check your bank balance first. If no money has come in, do not pay anything.

2. The collect request

A message or call asks you to "approve" a request so you can receive a refund or prize. Approving a collect request sends money out. Decline it.

3. The fake customer care number

You search for a company helpline on the internet and call the first number. Scammers put their own numbers in search results. Use only the number printed on your card, your bank passbook, or the official app or website.

4. The OTP trap

You get a call: "Your KYC is expiring. Share the OTP to continue." No bank asks for an OTP on a call. End the call.

5. The fake link on WhatsApp

A message says "You have won a gift" or "Your electricity will be cut tonight, click here." Never click such links. If you are worried, open the official app yourself.

6. The QR code trick

Scanning a QR code is for paying. If a stranger says "scan this to receive your payment," do not scan it.

7. The easy-money offer

Offers to earn money by liking videos, rating products or doing simple online tasks, especially if you must pay a small fee first, are a common trap. Real work does not ask you to pay to start.

8. The festive sale scam

Around festivals, many fake shopping pages and "limited offer" messages appear. Buy from sites and apps you know. If a price looks too good to be true, it usually is.

How do I keep my phone and accounts safe?

You do not need to be a tech expert. A few small habits do most of the work.

  1. Use a screen lock on your phone, and do not share it with anyone outside your family.
  2. Keep your UPI PIN different from your phone PIN and your ATM PIN.
  3. Never save PINs or card details in your phone notes or gallery.
  4. Download apps only from your phone's official app store.
  5. Do not install apps because a stranger on a call told you to.
  6. Turn on SMS or app alerts for every transaction, so you notice anything odd immediately.
  7. Set a daily limit on your UPI app, if your bank allows it. A lower limit means smaller losses in a bad moment.
  8. Check your passbook or app once a week for one minute.

If you share your phone with children, keep payment apps locked with a PIN of their own, so a game or a wrong tap cannot send money.

What should I do if money is taken from my account?

Act fast. The first hour matters the most.

  1. Call your bank's official helpline and ask them to block your card, UPI or net banking. Use the number from your card or passbook.
  2. Call 1930, the national cybercrime helpline, and report the fraud. You can also report at the official cybercrime reporting portal of the Government of India.
  3. Write down details: the time, amount, phone number, transaction ID and screenshots of any message.
  4. Change your passwords and PINs after you have blocked the account.
  5. Visit your bank branch and submit a written complaint. Ask for a copy with a stamp.
  6. Tell your family. Many women stay silent because they feel embarrassed. Please don't. Fraud happens to smart, careful people every day, and speaking up quickly gives you the best chance of help.

Rules about refunds depend on how the fraud happened and how fast you reported it. Always ask your bank what is possible in your case.

How can I teach other women in my family?

You can protect your mother, mother-in-law, sisters and friends too. Here are small ways to do it:

  • Share the golden rule: PIN is for paying, never for receiving.
  • Sit with your mother for ten minutes and show her how to decline a collect request.
  • Mention one common fraud at every kitty party. A two-minute "fraud of the month" chat keeps everyone alert.
  • Create a family rule: before sending money to anyone new, ask one person in the family first.

A little awareness spreads fast when women talk to each other. Our chapter on how to build an emergency fund is another good thing to share, because a small safety cushion helps you stay calm if something goes wrong.

Which documents and details should I keep safe?

Fraudsters often use small details to sound believable. Keep these private:

  • Aadhaar and PAN numbers
  • Bank account and card numbers
  • OTPs, PINs and passwords
  • Your date of birth and address, when asked by unknown callers

If you want to organise your important papers properly, read what every woman should know about her family's financial documents.

Your small step this week

  1. Open your UPI app and check that your PIN is not something easy like your birth year.
  2. Turn on transaction alerts for every account you use.
  3. Save your bank's official helpline number in your phone under "Bank Helpline".
  4. Save 1930 in your phone as "Cyber Fraud Helpline".
  5. Tell one woman in your family the golden rule: PIN is for paying, never for receiving.

Frequently asked questions

Do I need a PIN to receive money on UPI? No. You never enter a PIN to receive money. If a screen asks for your PIN, money is going out of your account.

What should I do if someone asks for my OTP? Do not share it with anyone, even if they say they are from your bank. End the call and contact your bank through the number on your card or passbook.

Is it safe to scan a QR code to get paid? No. Scanning a QR code is for making a payment. A stranger asking you to scan one to receive money is a common trick.

How quickly should I report an online fraud? Immediately. Call your bank to block the account, and then call 1930. The sooner you report, the better the chance of stopping or tracing the money.

Are small UPI payments safe? Yes, UPI is safe when you follow the basic rules. Fraud usually happens when someone is tricked into sharing a PIN, OTP or approving a request, not because UPI itself is unsafe.