Back to threat bulletin
Active / high riskUPI apps / WhatsApp / Phone call
UPI collect-request / refund reversal
Also known as: wrong transfer refund, OLX buyer scam, QR code to receive money
Behavioural sequence
How the script progresses
1
Refund or payment pretext
- Told money was sent by mistake
- Buyer insists on paying via a QR you must scan
2
Collect request sent
- A request appears in your UPI app asking you to approve
- Asked to scan a QR 'to receive' money
3
PIN entry pressed
- Told to enter your UPI PIN to receive funds
Likely next move
Refund or payment pretext
They will send a UPI collect request or a QR code and tell you approving it will credit your account.
Collect request sent
They will pressure you to enter your UPI PIN, claiming it is needed to receive money.
PIN entry pressed
The debit will complete and they will attempt a second, larger request immediately.
Do not do this
- You never enter a UPI PIN to RECEIVE money. A PIN only ever sends money out.
- Do not scan a QR code to receive a payment.
Sources
NPCI — UPI safety guidance · Retrieved 2026-08-22