UPI fraud complaint: who to call and what to keep
Call your bank, then 1930, then report at cybercrime.gov.in. Keep the payment reference and the link you were sent, and read the payee out of it with the decoder.
If money has left your account through a UPI payment you did not mean to make, act in this order: call your bank to block the UPI ID, call 1930, then file a report at cybercrime.gov.in. The more exact your details are, the easier the report becomes.
Do not delete the chat or the link before you have saved them. Paste the link into the decoder above to read the payee’s UPI ID and the amount from it, as in the example, where ₹4,999 would go to refund.desk@ybl, and write them down for your bank.
A Low reading means only that nothing odd shows in the text. The name your UPI app shows on its confirm screen is the better check.
Common questions
In what order should I report a UPI fraud?
Call your bank first, to block the UPI ID and stop more leaving. Then call 1930, the national cyber-fraud helpline, and report it at cybercrime.gov.in with the details. Speed matters more than a perfect write-up, so do the writing afterwards.
What should I keep for a UPI fraud report?
The amount, the date and time, the payment reference your app shows, the other side’s UPI ID, and the message or link you were sent. Take screenshots before you block anyone or delete a chat, because chats can disappear.
Will reporting a UPI fraud get my money back?
Nobody can promise that. Speed helps, because the longer the money sits the further it can move, and a clear report helps most. Ignore anyone who offers to recover it for a fee: that is the second half of the same trick.
What if I have already paid someone I now doubt?
Call your bank straight away to block the UPI ID, then call 1930, the national cyber-fraud helpline, and report it at cybercrime.gov.in. Save the chat and the payment details first. The steps are in order in the after-a-scam guide on this site.
Does the decoder send my link anywhere?
No. It is code running in your browser, and the link you paste is read on your device and sent nowhere. Nothing is stored, logged or looked up, so you can paste any link without it leaving your phone.