Two developments have created an enabling environment for fraud— the explosion of smartphones with internet and multiple modes of payment through apps. While there is enough protection built into UPI and card payments, fraudsters use various tricks to get users to part with critical information.
Methods used by tricksters range from payment requests made on the Unified Payments Interface (UPI) to sharing of QR codes on WhatsApp. Here are some common ones doing the rounds.
Getty Images
2/6
Request money fraud
Fraudsters misuse the request feature on UPI by sending fake payment requests with messages like ‘Enter your UPI PIN to receive money, “Payment successful receive Rs. xxx” etc. You need to enter PIN only for sending money. Do not: 'Pay' or enter your UPI pin to receive money.
ThinkStock Photos
3/6
QR code fraud
Fraudsters share a QR code over WhatsApp asking for the code to be scanned to receive money in their account. This QR code, a feature in some UPI apps, is in fact a collect request and scanning and entering your PIN is acceding to their request. Again you need to scan QR only to make payments. Do not: Share card number, expiry date, PIN, OTP etc. with anyone.
ThinkStock Photos
4/6
Remote access app
Fraudsters ask users to install screen-sharing apps such as Screenshare, Anydesk, Teamviewer and use them to get access to bank credentials. These apps are not malware, but they do grant access of your mobile data to the third party. Do not: Download third-party apps such as Screenshare, Anydesk, Teamviewer to enable/receive payments.
ThinkStock Photos
5/6
Social media/impersonation fraud
Fraudsters track complaints in social media and share fake contacts or impersonate bankers or RBI officials in response to a post and ask for confidential information which no banker is supposed to ask for. Do not: Search for helpline numbers on Google, Facebook, Twitter. Instead, check the official website.
Getty Images
6/6
SIM swap fraud
Fraudsters manage to get a duplicate SIM which provides them access to one-time passwords. They do this by pretending to be from a mobile company and asking you to forward an SMS containing the SIM card number to activate the duplicate SIM. Do not: Respond to texts, emails from unknown addresses to click on links.
