The Dark Side of UPI !

That scary message from your bank when money starts disappearing...

Just recently, on 20th January 2026, around 7:30 PM in Karnataka, a well-educated civil engineer named Chetan Kumar was checking his phone when he got a message. His bank account was debited by ₹48,000. Before he could react, another message popped up—₹52,000 gone. Then again, ₹64,000 deducted. And just like that, within the next 10 minutes, almost ₹6.3 lakhs disappeared from his accounts. ₹4.3 lakhs from Bank of Baroda and ₹1.9 lakhs from Bank of Karnataka vanished into thin air.

The scary part? Chetan never entered any OTP anywhere. He didn't share his UPI ID, didn't scan any QR code, didn't click on any suspicious link, and didn't even pick up any unknown call. Yet his money was gone.

He ran to the police station like any of us would. They registered the case and started investigation. Chetan kept getting updates, but the money? Never came back.

How Big is This Problem?

The Numbers: Between 2025 and 2026, India saw over 700 million UPI transactions happening daily. But alongside this convenience came 6.32 lakh UPI fraud cases, with people like us losing ₹485 crores. And here is the heartbreaking truth—in 90% of these cases, victims get zero money back. Maximum recovery is only 6-10%.

Between 2025 and 2026, India saw over 700 million UPI transactions happening daily. But alongside this convenience came 6.32 lakh UPI fraud cases, with people like us losing ₹485 crores. And here is the heartbreaking truth—in 90% of these cases, victims get zero money back. Maximum recovery is only 6-10%. So if you get caught in this scam, there is a 93% chance your money is gone forever.

Chetan is not some careless person. He is a civil engineer—an educated professional. If he can fall for this, any of us can.

Where Does the Money Go?

We all think scams work like this—someone calls asking for money, we refuse, we block the number, end of story. But brother, these people work like a courier service network.

Just like when you send a parcel—it goes from your local store to a transport hub, then to a truck, then to another hub, and finally reaches home—the stolen money travels the same route. When money leaves your account, it doesn't go directly to the scammer.

The Process: First, it lands in "mule accounts." These are usually accounts belonging to students, daily wage workers, or lower middle-class people who can't maintain high balances in their bank accounts. These folks rent out their UPI accounts for some quick cash.

First, it lands in "mule accounts." These are usually accounts belonging to students, daily wage workers, or lower middle-class people who can't maintain high balances in their bank accounts. These folks rent out their UPI accounts for some quick cash. Once the money hits their account, it moves to another account, then splits via NEFT, IMPS, and UPI to different locations.

From there, it gets divided further—some goes to buy gift cards, some buys cryptocurrency, some gets transferred abroad, and some goes to random accounts. Finally, all this money gets mixed together and lands in one person's hands who is impossible to catch because the money has gone through so many transactions that neither police nor banks can track it properly.

You might catch the thief, but you will never catch the money.

The Five Tricks They Use

The government has already blocked over 24 lakh suspicious accounts, but these keep increasing daily. This is not some small-time fraud—it's a massive operation.

The government has already blocked over 24 lakh suspicious accounts, but these keep increasing daily. This is not some small-time fraud—it's a massive operation. Here are the five main ways they empty your bank account:

1 Collect Request Scam

This is what happened with Chetan. It is very common. The scammer sends a fake "Receive Money" request. They tell you that if you enter your PIN, money will come into your account. The moment you enter your PIN on a fake page that looks like Paytm or similar apps, your PIN goes to them. Within minutes, they clean out your account because they have your UPI PIN.

2 QR Code Fraud

You are asked to scan a fake or corrupted QR code. The moment you scan it, your money goes straight to the scammer's bank. Why? Because that QR code steals your bank details and UPI ID. It takes you to a different page that looks like the real app but isn't. You enter your PIN there, and it's game over.

3 Phishing and Smishing

You get an email or SMS saying your KYC needs verification or your account needs approval. You enter the website, put in your UPI ID, name, PIN, and OTP. Everything gets captured by the fake website, and your money disappears.

4 Screen Sharing Scam

Someone asks you to install AnyDesk or TeamViewer so they can "help" you. The moment you give them access to your phone, they install software that forwards all your SMS messages to their number. Next time when you get an OTP for UPI, it goes to them. Taking money out becomes very easy for them.

5 Fake Customer Care Scam

You get a call saying you have received a refund or cashback, and some amount is pending. They just need your OTP. The moment you get the OTP and share it, your money is gone.

The New AI Scams (2026 Edition)

Now scammers are using AI too:

Digital Arrest/AI Voice Scam: You get a call saying, "I am calling from Karnataka Police Station. Your money is in danger. Click this link to save it." They use AI to mimic police voices and scare you. They say you are under investigation, your account will get blocked.

Digital Arrest/AI Voice Scam: You get a call saying, "I am calling from Karnataka Police Station. Your money is in danger. Click this link to save it." They use AI to mimic police voices and scare you. They say you are under investigation, your account will get blocked. They use fear tactics. Don't disconnect this call, transfer the security amount immediately, or an arrest warrant will be issued in your name.

Just recently, using this exact method, fraudsters took almost ₹31.83 crores from an IT executive and ₹31 lakhs from a government employee.

Fake APK Scam: You think your internet or electricity bill is unpaid. You get a WhatsApp message saying, "Download this app and pay your electricity bill here." You install the APK file they sent and give all permissions. Next thing you know, they have withdrawn money from your Axis Bank account or whichever bank you use.

Fake APK Scam: You think your internet or electricity bill is unpaid. You get a WhatsApp message saying, "Download this app and pay your electricity bill here." You install the APK file they sent and give all permissions. Next thing you know, they have withdrawn money from your Axis Bank account or whichever bank you use.

Which Banks Are Most Targeted?

Most Targeted Banks: If your account is in HDFC, Airtel Payments Bank, Axis Bank, ICICI Bank, or Nainital Bank, your chances of being scammed are higher.
  • HDFC: Over 35,000 UPI fraud cases
  • Airtel Payments Bank: Over 19,000 cases
  • Axis Bank: Over 17,000 cases
  • ICICI Bank: Losses of ₹31 crores (highest monetary loss)
  • Nainital Bank: Lost ₹16 crores

If your account is in HDFC, Airtel Payments Bank, Axis Bank, ICICI Bank, or Nainital Bank, your chances of being scammed are higher.

In 2024-25, HDFC had over 35,000 UPI fraud cases, Airtel Payments Bank had over 19,000, Axis Bank had over 17,000, and ICICI Bank saw losses of ₹31 crores. Nainital Bank lost ₹16 crores. ICICI had the highest monetary loss.

But don't think other banks are completely safe. The problem isn't that banks are unsafe—they are safe. The problem is that we don't know how to keep our money safe.

How to Protect Yourself

This is not rocket science. These are very basic things we usually forget when we are in a hurry.

This is not rocket science. These are very basic things we usually forget when we are in a hurry:

1. Never enter UPI PIN to receive money: If someone is sending you money, they only need your UPI ID. No PIN is required, whether it's a big bank or big merchant.

2. Don't click links: When someone sends a link that looks similar to PhonePe, Paytm, or Google Pay interface, never enter your PIN there. Always open your UPI app directly and make the payment from there. Never enter your UPI PIN on any website. It should only be entered in your phone's UPI app.

3. Check QR codes: When scanning any QR code at a shop, first show it to the shopkeeper and confirm it's their code. Only process the payment inside official apps like PhonePe, Paytm, or Google Pay. Never scan and pay through random scanners.

4. Never install APKs from WhatsApp: If someone sends you an APK file on WhatsApp saying "download this app to pay electricity bill," never do it. Always use official apps from Google Play Store, or pay directly through official websites. Never install apps via WhatsApp.

5. Immediate action: Government has set up a helpline. If any fraud happens, immediately call 1930 from your phone and report to the helpline, or report on cyber.gov.in. If you act within 1-2 hours, your bank account will get frozen and chances of money recovery increase.

6. Set transaction limits: In your UPI settings, put a daily limit—say ₹2000. So even if you accidentally scan something or get scammed, they cannot take more than ₹2000 from your account.

Don't Panic, Just Be Alert

These things are very basic, but in the moment, we tend to forget them. Even the best of us can make mistakes.

These things are very basic, but in the moment, we tend to forget them. Even the best of us can make mistakes. The point is not to be scared of fraud, but to be aware. When fraud happens, fix the basics quickly and immediately take the next step. Because the more time you take, the harder it gets to recover your money.

Share this with people who you think really need to know this—your parents, relatives, friends who might fall for these tricks. Stay safe, stay alert.

Post a Comment

Previous Post Next Post