UPI AutoPay Mandate Scam by SMS

How it looks by SMS, the red flags and what to do.

On SMS the scammer has only a few lines to work with, so they use a deadline, a threat or a prize and a link that must be tapped "now". UPI AutoPay Mandate Scam is one of the ways this shows up: You approve a request that looks harmless, but it sets up a recurring UPI mandate that lets a scammer pull money again and again.

What upi autopay mandate scam looks like by SMS

• Several near-identical messages arriving together from different senders.
• A sender name that resembles a bank, courier, tax or utility, or an ordinary mobile number.
• A very short message with a deadline such as "today" or "within 24 hours".

The scammer contacts you with a prize, a free trial or a discount. To claim it, you are asked to 'activate' it using a request in your UPI app. The request is called a mandate or autopay request, but the notification text is short and the amount may be low, such as Re 1 or Rs 5, so it does not look risky.

Red flags to check on the text message

• An 'activation' request arrives for a prize or free offer.
• The request is described as a mandate, autopay or recurring payment.
• The charged amount is tiny but a higher maximum appears in the details.
• The caller wants you to approve while they stay on the line.
• The link domain is not the one you type yourself for that organisation.
• The message asks for an OTP, PIN, card number or password.

What to do

1. Decline the request and read every line before you approve any mandate.
2. Open your UPI app and check the section that lists autopay or mandates.
3. Cancel any mandate you do not recognise.
4. Delete the message and tell family members who may get the same text.
5. Do not reply, do not tap the link and do not call the number in the message.
6. Open the official app or type the official website yourself to see if there is any real notice.

You can report suspicious SMS and calls on the Sanchar Saathi portal (Chakshu facility) of the Department of Telecommunications.

If money or a code is already gone

1. Cancel the mandate in your UPI app and note the merchant name and ID.
2. Call 1930 and give the transaction details.
3. Tell your bank through the number on your card or passbook to block further pulls.
4. Report at https://cybercrime.gov.in with screenshots of the request.

National Cyber Crime Helpline: 1930; report at cybercrime.gov.in.

Safeavio's Money Shield checklist reminds you to read the screen before you pay, and the scam check can review a message that promises a free prize or activation and show the pressure signals. It cannot see inside your UPI app or cancel a mandate for you, so check the autopay list there yourself. Review the autopay list yourself and cancel anything you do not know.

Full guide: UPI AutoPay Mandate Scam: how it works, signs and what to do. Other channels: fake app, WhatsApp, phone call.

Questions