A customer holds up their phone: "Payment successful, ₹4,800." The green tick, the sound, the transaction ID all look right. They take the goods and leave. That evening, the money isn't in your account, because it was never sent.
UPI has made taking payments easy for every shop, clinic and small business in India. It has made faking them easy too. The good news: almost every UPI scam aimed at businesses beats the same weak spot, and one habit closes it.
The four UPI scams businesses see most
1. The fake "payment successful" screen
Apps and edited screenshots can produce a payment screen that looks identical to a real one, complete with amount, time and a made-up transaction ID. It works because staff check the customer's phone, at a busy counter, in a hurry. Some versions also send a fake SMS that looks like a bank credit alert.
2. The collect request dressed up as a payment
"I'm sending you the advance, just approve the request on your phone." What arrives is a collect request: a request for you to pay them. Approve it and enter your PIN, and the money leaves your account. The rule that stops this is simple: you never need to enter your UPI PIN to receive money. If something asks for your PIN, you are paying.
3. The QR code that takes instead of gives
The same trick with a QR code: "Scan this to receive your refund." Scanning a QR code is how you pay, not how you get paid. A related scam targets your own counter: a fraudster sticks their QR code over yours, and every customer who scans it pays the scammer instead of you.
4. "I sent extra by mistake, please return it"
You get a message or call saying they overpaid, often with a fake credit SMS as "proof". You refund the difference from your own money. The original overpayment never existed.
The 10-second check for every payment
Every scam above relies on you trusting something the other person shows you. So don't:
- Confirm on your side, never theirs. Check your own UPI app, your bank app or your payment soundbox. The customer's screen proves nothing.
- Don't rely on SMS alone. Messages can be faked. The credit showing in your bank or UPI app is the only proof.
- For large amounts, wait until it's credited before handing over goods. A genuine customer won't mind 30 seconds.
- Never enter your PIN to "receive" anything, and never scan a customer's QR code to get paid.
- Check for an overpayment in your bank app before refunding a single rupee.
- Look at your counter QR code every morning. Make sure it's yours and nothing has been stuck on top.
Write those six lines on a card and keep it at the till. Most losses happen with a new staff member on a busy day, not with the owner.
If you've already been scammed
Speed matters. Money moved through UPI can sometimes be frozen if it's reported quickly, before it's passed on.
- Call 1930, the National Cyber Crime Helpline, straight away.
- Report it at cybercrime.gov.in, the government's official reporting portal.
- Tell your bank and ask them to flag the transaction.
- Keep everything: screenshots, the transaction ID (UTR), the phone number or UPI ID, and the time it happened.
How Computer Geeks helps with this
Our Cyber Secure plans include short, practical training that walks your staff through scams like these, so the person at the counter knows what a fake looks like. We can also automate your payment reconciliation: every UPI credit is matched against your sales automatically, and anything that doesn't add up is flagged the same day, not at month end. If a phone or PC has been compromised, our remote support team can check and clean it over an encrypted session.
Keep reading
- How to spot a phishing email before it costs you
- 5 repetitive business tasks you should stop doing by hand
Want your team trained to spot payment scams, or your UPI payments reconciled automatically? Let's talk.