A customer shows you a screenshot of a "successful" UPI payment on their phone. The screenshot looks real — it shows your business name, the correct amount, and a transaction ID. But it is either edited or generated using a fake UPI success screen app. No money has actually moved.

The customer takes the goods and leaves. You check your account later and find nothing received.

Always verify payment in your own bank account or UPI app — not the customer's screen. Never release goods on the basis of a screenshot alone.

Someone calls claiming to be a customer, a bank representative, or a delivery agent. They say they need to send you money — a refund, a security deposit, a payment — and ask you to approve a UPI collect request they are sending. You approve it thinking money is coming in. But approving a collect request sends money OUT of your account.

UPI collect requests always take money from you. To receive money, you need to share your QR code or UPI ID — never approve a request. Decline all collect requests from unknown sources.

A fraudster visits your shop — as a customer or maintenance person — and quietly places their own printed QR code over or next to your genuine QR code. Customers then scan the wrong code and pay the fraudster directly. You receive nothing but assume payments are happening normally.

Check your QR code display every morning. Verify that the business name shown when a customer scans matches your registered name. Laminate your QR code and mount it securely.

You call your bank or payment gateway about a transaction issue. A scammer — who has found your business number online — calls you first, posing as official support. They ask for your UPI PIN, OTP, or request remote access to your phone to "fix the issue." Once they have these, your account is drained.

No bank or UPI provider will ever ask for your PIN or OTP over a call. Hang up immediately. Always call the number on the back of your card or the official website.

A buyer pays you more than the agreed amount — say ₹5,000 instead of ₹500 — and immediately calls asking you to refund the excess via a collect request or direct transfer to a "different account." The original payment is either fraudulent or will be reversed. You refund the excess and lose both amounts.

Never refund excess payments to a different account or via collect requests. Wait 48 hours for the original payment to fully clear before processing any refund.

You receive a message or call claiming your UPI or business account KYC is expired and will be blocked unless you update it immediately by clicking a link or calling a number. The link installs malware or leads to a fake login page that captures your credentials.

KYC updates are done through official bank branches or verified apps only. Never click links in SMS or WhatsApp messages about KYC. Your bank will never threaten immediate account blocking via a text.