What a UPI PIN is
Your UPI PIN is the secret number you set for each bank account linked to a UPI app. UPI (Unified Payments Interface) is the system behind most phone payments in India. Typing your UPI PIN tells your bank: “Yes, send this money from my account.”
That is its only job. The PIN is for sending money, never for receiving it. When someone pays you, the money simply arrives. You don’t type anything.
A common trick, step by step
Ravi, 41, posts his old bicycle on a resale website for ₹6,500. Within minutes a “buyer” messages him. The buyer says he is out of town, can’t come in person, and will pay through UPI right now.
- The buyer sends a QR code and says, “Scan this to receive ₹6,500.”
- Ravi scans it. His UPI app opens a payment screen showing ₹6,500 and asks for his PIN.
- If Ravi types his PIN, ₹6,500 leaves his account. He has paid the stranger, and he still has the bicycle.
- The buyer then calls in a hurry: “Sorry, wrong amount, scan again, I’ll send double.” Each scan is another payment out.
The giveaway is the PIN screen. Scanning a QR code and entering a PIN is always paying. A real buyer only needs your UPI ID or your QR code, and you enter nothing.
Fictional example.
Where you are asked for it
- Inside your own UPI app, on the final payment screen, after you have checked the name and amount. This is the only place it belongs.
- When you set or reset the PIN, following the steps your bank or UPI app shows.
Nobody else needs it. Not bank staff, not customer care, not the police and not a delivery agent. Some scams use fear, such as fake “digital arrest” video calls. Others use greed, like “earn by completing tasks”. Both end with you typing your PIN or approving a transfer.
Common mistakes
- Approving a request to “get” a refund, prize or cashback. Since 1 October 2025, UPI no longer allows ordinary person-to-person collect requests (where one person asks another to pay). A request that reaches you is usually from a merchant ID. Read the name with care, and remember that approving it pays money out.
- Trusting an SMS that says money arrived. Check the balance in your bank app instead.
- Sharing the PIN with a friend or family member “just this once”. Anyone with your phone and PIN can send money, up to the UPI limit of ₹1 lakh a day to other people.
- Letting someone use your UPI or account for “commission”. This can make you a money mule (a person whose account is used to move stolen money). See our guide on money mules.
What to do if you shared it or paid
- Call 1930 (the national cyber fraud helpline) or report at cybercrime.gov.in as soon as you can. Fast reports give the best chance of freezing the money.
- Tell your bank through its official app or helpline. Ask it to block UPI if needed, and note the complaint number.
- Change your UPI PIN. Change any passwords you shared.
- Keep screenshots, the payment reference number and the fraudster’s number or UPI ID.
If you got a suspicious call or message but lost nothing, you can report it on Sanchar Saathi (Chakshu). Our guide A suspicious UPI request explains who bears the loss and the reporting dates that apply.
Never share your UPI PIN, OTP or bank password with anyone. Paisavy will never ask for them.