UPI collect requests and the refund trick

You are selling something online, or a “support agent” says you are owed a refund. The other person says they will send the money. Then a payment request appears on your phone, and they ask you to approve it and enter your PIN to “receive” the money.

If you do, the money leaves your account. This guide explains the trick, the one fact that stops it, and what to do if you have already approved something.

One fact that settles it

• To send money by UPI, you enter your PIN.
• To receive money by UPI, you never enter your PIN.

If anything asks for your PIN so that money can arrive, it is a scam. No exceptions. Hold on to this one sentence and you can ignore almost every version of the trick.

How the trick works

1. A buyer, a “refund team” or a “customer care agent” tells you money is coming.
2. They send a collect request. This is a request for you to pay them, shown on your phone with wording that is easy to misread.
3. Or they send a QR code and say: scan this to receive the amount.
4. You approve and enter your PIN, thinking you are accepting money. You are actually paying it.

Variations include a “wrong transfer, please return it” message, a “KYC” or “verification” step before a refund is released, and a buyer who says the payment “did not go through” and asks you to try again.

Where it usually starts

• Selling online. A “buyer” for a sofa, a phone or a bike says they will pay in advance, then sends a request or a code.
• Fake customer care. You search for a company’s helpline, land on a number put there by scammers, and are told to approve a refund request.
• Refunds you did not expect. A message says a payment or order was cancelled and a refund is waiting, with a link or a number to call.
• Wrong transfers. Money (or a message saying so) appears, and you are asked to send it back. Sometimes the first amount is real and the request that follows is the scam.

How to stay safe

• Read the request. A collect request shows a name, an amount and the words pay or collect. If it says you are paying, you are paying.
• Decline requests you did not expect, and block the sender.
• Never scan a QR code to receive money. QR codes are for paying.
• Keep your UPI PIN to yourself. Do not share it with anyone, including “bank staff”.
• Do not move the conversation to an app or call where you are asked to share your screen.
• Find customer care numbers on the company’s own website or app, not in search results or messages.
• Slow down. A real refund does not expire in minutes.

If you already paid

Call your bank straight away to report the transaction and ask it to block UPI access, then follow these steps and report it. Keep screenshots of the request, the sender’s UPI ID, the transaction ID and the chat. Quick action gives you the best chance, though nobody can promise to get the money back.

The same pattern, in other costumes

The refund trick belongs to a larger family of scams that move you away from the official place and rush you into an action: the fake KYC message, the scan-to-receive QR code, the fake courier fee. For a plain-English guide to the channels they use, read smishing, vishing and quishing explained.