UPI AutoPay Mandate Scam
You approve a request that looks harmless, but it sets up a recurring UPI mandate that lets a scammer pull money again and again.
A UPI mandate is a standing permission for a company to charge you on a schedule, such as a subscription. Scammers send a mandate request that looks like a free trial, a gift or a cashback activation. Approving it and entering your PIN once creates a permission that may take money later, without you needing to approve each payment. Read before you tap approve.
How the scam works
The scammer contacts you with a prize, a free trial or a discount. To claim it, you are asked to 'activate' it using a request in your UPI app. The request is called a mandate or autopay request, but the notification text is short and the amount may be low, such as Re 1 or Rs 5, so it does not look risky.
They stay on the call or chat while you approve it, saying the PIN is just a security step. Because it is a small amount, you let your guard down. Behind it is a standing permission for a much larger maximum amount, which you may miss if you do not read the details line on the approval page.
After some days or weeks the scammer raises the charge within the limit you approved. Money leaves your account on schedule with no new prompt. You may not notice until your balance is low. The scammer profits from repeating the deduction and can disappear before you find out where the money went. The deductions repeat each cycle.
An example of what you may see
Example only: 'Congratulations, you have won a free premium pack. To claim, approve the activation request sent to your UPI app for Re 1 and enter your PIN. It is only a verification. Please tap approve now, the offer closes in five minutes.' The small amount hides a recurring permission with a much higher cap. The request page lists a merchant name you do not know, a start date and a maximum limit that is far higher than Re 1. The caller says to ignore that part and just enter the PIN, which is the sign to stop.
This example is written for illustration. Real messages change their wording, names and links all the time.
Red flags
- An 'activation' request arrives for a prize or free offer.
- The request is described as a mandate, autopay or recurring payment.
- The charged amount is tiny but a higher maximum appears in the details.
- The caller wants you to approve while they stay on the line.
- The merchant name is unfamiliar or a random string.
- No genuine order or subscription is linked to the request.
What to do right now
- Decline the request and read every line before you approve any mandate.
- Open your UPI app and check the section that lists autopay or mandates.
- Cancel any mandate you do not recognise.
- Block the sender and report the number.
- Set a lower daily limit in your UPI app if the app allows it.
If you already paid or shared a code
- Cancel the mandate in your UPI app and note the merchant name and ID.
- Call 1930 and give the transaction details.
- Tell your bank through the number on your card or passbook to block further pulls.
- Report at https://cybercrime.gov.in with screenshots of the request.
National Cyber Crime Helpline: 1930. Report online at cybercrime.gov.in. Do it fast: the sooner your bank is told, the better the chance that money can be held.
Where this scam shows up
Read how it looks on each channel:
How Safeavio helps
Safeavio's Money Shield checklist reminds you to read the screen before you pay, and the scam check can review a message that promises a free prize or activation and show the pressure signals. It cannot see inside your UPI app or cancel a mandate for you, so check the autopay list there yourself. Review the autopay list yourself and cancel anything you do not know.
Check it before you tap or pay
Safeavio Sentinel is a made-in-India Android app: paste a message or link, or scan a QR code, and get a plain verdict with the reasons. It helps you spot a scam; it does not promise to stop every one.
Download for AndroidWhat the app does
Google Play listing: coming soon. Today the signed APK is on safeavio.com/download. Android 7.0 or later.
Questions people ask
What is a UPI mandate?
It is a permission you give a merchant to charge your account on a schedule, up to a limit you approve. It is useful for genuine subscriptions, but dangerous if you approve one for a stranger offering a free prize.
How do I check the mandates on my account?
Open your UPI app and look in its settings or profile area for the autopay or mandates list. Review each entry and cancel any you do not recognise. Menu names differ between apps, so use the search option.
Why would a scammer use a tiny amount?
A tiny amount like Re 1 does not feel risky, so people approve it. The mandate may allow a far larger maximum later. Always read the details line, not just the first amount shown. Read the maximum limit too.