An incoming UPI collect request asks you to pay money; it does not send money to you. If you enter your UPI PIN to approve it, you are authorizing a payment. That is why scammers use fake refunds, prizes, jobs, and buyer messages to pressure people into approving a request they did not start.
Not every collect request is fraudulent. A genuine merchant checkout or an IPO application can use this UPI feature. The safe rule is simple: approve a request only when you started a known transaction and the payee, amount, and purpose match what you expect. Never enter a UPI PIN merely to receive a payment, cashback, refund, prize, or salary.
What is a UPI collect request?
UPI supports both sending money and requesting money. A collect request, sometimes shown as “request money” or “pay request,” is an incoming payment request. NPCI’s UPI information describes this as a pull transaction: the requester asks for an amount from the payer’s UPI ID, and the payer must approve it in a UPI app.
That approval matters. NPCI’s UPI FAQs explain that when a person enters a UPI ID at an online merchant, the app can receive a collect request and the UPI PIN completes the payment. The same screen flow can be misused by a scammer who makes a payment request look like a refund or a reward.
The one rule to remember before entering a UPI PIN
A UPI PIN is used to authorize a payment, not to receive money. A person who wants to send you money needs, at most, your UPI ID or your QR code. They do not need your UPI PIN, OTP, bank password, debit-card number, CVV, screen-sharing access, or remote-control app.
If a caller, marketplace buyer, delivery agent, recruiter, or “support executive” says you must enter a PIN to receive money, stop the conversation. Open your UPI app yourself and inspect the request without following a link in their message.
Common stories used in collect-request scams
- Refund or cashback: Someone says a wrong payment, failed order, or reward will be credited after you “accept” a request.
- Marketplace buyer: A fake buyer says they have already paid and sends a QR code or collect request that asks you to authorize a debit.
- Prize, giveaway, or job payment: A message claims a prize, commission, or salary is waiting but asks you to pay a small “release,” “verification,” or “processing” amount.
- Fake customer support: An impersonator asks you to install a screen-sharing app, follow their steps, or enter a PIN while they claim to fix a bank, courier, shopping, or KYC problem.
These stories change, but the risky action is consistent: an unexpected person is pushing you to approve a payment or disclose a credential. NPCI’s fraud-awareness material also warns about unknown links and QR codes used with reward promises.
How to inspect a request before you approve it
- Pause before entering the PIN. Urgency is a pressure tactic. A legitimate transaction can wait while you check it.
- Read whether the screen says pay, send, request, or collect. Do not rely only on a notification preview or the other person’s explanation.
- Check the amount and payee. The amount, UPI ID, merchant name, and purpose should make sense for a transaction you initiated.
- Verify outside the message. For a seller, employer, or business, use the official app, website, or a phone number you already trust. Do not use the link or number sent by the person pressuring you.
- Use verified merchant details where relevant. For a legitimate merchant or IPO flow, inspect the merchant indication and the payment details rather than assuming any request is safe.
Is every collect request a scam?
No. Collect requests are a real UPI payment feature. A request can be legitimate when you deliberately begin a payment on a trusted merchant checkout, apply for an IPO through a recognised route, or otherwise expect the exact amount and payee. The important distinction is who started the transaction and whether the details independently match.
Do not approve a request because a stranger calls it a refund. If you are due a refund, check the order or service account you opened yourself, or ask the verified merchant through its official support route how it will be returned.
What to do if you already approved an unexpected UPI request
Act promptly, but avoid anyone who claims they can guarantee recovery for an upfront fee.
- Stop communicating with the requester. Do not make a second payment to “unlock” a refund or cancel the first one.
- Contact your bank or UPI app through its official support route. Report the transaction and request an acknowledgement or complaint reference.
- Call 1930 immediately for financial cyber fraud. The National Cyber Crime Reporting Portal identifies 1930 as the 24/7 number for immediate financial-cyber-fraud reporting.
- File and track the report at cybercrime.gov.in. Include the amount, time, transaction ID, UPI ID, screenshots, phone number or account used, and the bank/app acknowledgement.
- Secure related accounts. If you shared an OTP, password, card detail, or screen access, change affected credentials from a trusted device and review account sessions and recovery information.
Prompt reporting can help the relevant organisations act sooner, but it does not guarantee that funds will be recovered. Keep every complaint number and transaction record for follow-up.
Safer ways to receive money
Share a UPI ID or QR code only when you are comfortable doing so, then wait for the sender’s payment to appear in your own transaction history. Do not scan a QR code or enter a UPI PIN to receive a payment. If a buyer is genuine, they can pay using the details you provide without taking control of your screen or requiring your banking credentials.
Keep transaction notifications on. If an unfamiliar request or debit appears, inspect it in the app, then use the official bank or app support route. Our broader Online Safety in India guide covers reporting routes, evidence preservation, and account recovery in more detail.
Frequently asked questions
Can someone take money just by sending a collect request?
An incoming request by itself does not complete a payment. The payer must approve the request in their UPI app and authorise it with their UPI PIN. Treat an unexpected request as a reason to stop and check, not as a payment you must accept.
Can I cancel a UPI payment after entering my PIN?
NPCI’s FAQs state that a payment cannot be stopped once it has been initiated. Contact the bank or payment app promptly, call 1930 for financial cyber fraud, and submit the cybercrime report with the transaction details.
Should I scan a QR code to receive money?
Do not assume a QR code is for receiving money. Read the app’s payment screen carefully. If it asks you to enter a UPI PIN, it is asking you to authorise something; do not proceed unless it is an expected payment you initiated.
What information can I give a genuine buyer?
A buyer can use your UPI ID or QR code to send money. Never give a buyer your UPI PIN, OTP, card number, CVV, net-banking password, or access to your phone screen. For related credential protection, read our guides to OTP scams and phishing-resistant account security.
Official sources
- NPCI: UPI Frequently Asked Questions
- NPCI: UPI overview
- NPCI: fraud awareness
- National Cyber Crime Reporting Portal
Reviewed by the Infosiast Editorial Team on September 9, 2026. UPI app screens and reporting steps can change, so confirm urgent instructions with your bank, payment app, NPCI, or the official cybercrime portal.
