Quick answer: If you have lost money to an online or UPI fraud, call 1930 or report at cybercrime.gov.in immediately, then call your bank to block the account or card. Report suspicious calls, SMS or WhatsApp messages that have not cost you money on Chakshu (Sanchar Saathi portal). Most seller scams depend on getting you to scan a QR code, enter your UPI PIN, share an OTP or click a link; you never need any of these to receive money.
Why small sellers are targeted
Home businesses take payments from strangers every day, publish their phone numbers openly and reply fast to win orders. Scammers rely on that speed. Knowing the common scripts is the best protection.
The common scams and how to spot them
| Scam | How it works | Warning sign |
|---|---|---|
| “Overpaid” UPI refund | Buyer sends a fake payment screenshot or a payment request, then asks you to “refund the extra” | Money not actually in your bank app; a collect request asking for your PIN |
| QR code to “receive” money | Buyer sends a QR code and says scan it to receive payment | Scanning and entering your PIN always sends money out |
| Fake COD orders | Large or repeat cash-on-delivery orders that are refused at the door | New number, odd address, rush to ship, no reply to confirmation calls |
| Bulk order with “advance” twist | Big corporate or army order, but you must pay a registration or vendor fee first | Any request to pay before receiving an order |
| Fake GST or tax official | Caller threatens penalties or cancellation unless you pay now or share details | Pressure, personal UPI or bank account for “fines” |
| Fake loan or grant offers | Instant business loan or government scheme approval, after a “processing fee” | Upfront fee, unknown app, request for contacts or photo access |
| Phishing links | SMS, email or WhatsApp claiming your marketplace account, KYC or courier is blocked | Short or misspelt links, urgent deadlines, request for login or OTP |
| Fake courier or delivery calls | “Parcel stuck, pay ₹10 to reschedule” link or a request to install an app | Links to small payments, remote access apps |
Rules that protect you from most scams
- You never enter a UPI PIN to receive money. A PIN is only for sending money or checking your balance. Any QR code or request that asks for your PIN is a payment out.
- Check your bank app, not screenshots. Ship only after the money shows in your bank or UPI app’s transaction history. Screenshots and SMS can be faked.
- Never share OTPs or passwords with anyone, including people who say they are from your bank, a marketplace, GST or the police.
- Do not install apps on a caller’s request, especially screen-sharing or remote access apps.
- Do not pay to receive an order, loan or grant. Government schemes are applied for on official portals; genuine buyers do not charge you registration fees.
- Verify through official channels. Hang up and call your bank on the number printed on your card or passbook. Check GST notices by logging in to the GST portal yourself. Check marketplace issues in the seller app, not through a link.
Reducing COD and fake order losses
COD fraud does not usually involve cyber crime, but it costs small sellers shipping both ways and blocked stock.
- Call or WhatsApp to confirm COD orders above a set value before shipping.
- Ask for a part advance or full prepayment on high-value or custom orders.
- Keep a simple blocklist of numbers and addresses that refused delivery.
- Turn off COD for pin codes or products with repeated refusals, if your platform or courier allows it.
- Record a packing video for valuable orders so you can contest “empty box” or “wrong item” claims.
If you have lost money: what to do, in order
Speed matters. The sooner a fraud is reported, the better the chance that funds can be frozen in the receiving accounts.
- Call 1930, the national cybercrime helpline, or file a complaint at cybercrime.gov.in. Keep the acknowledgement or complaint number.
- Call your bank’s official helpline and ask them to block the card, UPI or net banking, and to register a fraud complaint. Ask for a reference number.
- Report in your UPI app using its help or dispute option for that transaction.
- Collect evidence: transaction IDs, UTR numbers, screenshots of chats, the caller’s number, the UPI ID or account you paid, links and dates.
- Change passwords for email, banking and marketplace accounts if you clicked a link or shared details.
- Follow up with your bank in writing. If the bank does not resolve your complaint, you can escalate to the RBI Ombudsman through the RBI’s complaint portal.
What your bank must do
RBI rules on unauthorised electronic transactions (first issued in July 2017) say:
- Zero liability if the fraud was due to the bank’s fault, or due to a third-party breach and you report it within 3 working days of the bank’s alert.
- If you report a third-party breach in 4 to 7 working days, your loss is capped. For an MSME current, cash credit or overdraft account, or a savings account, the cap is ₹10,000 (or the transaction amount, if lower).
- If the loss happened because you shared your PIN, OTP or password, you bear the loss until you report it to the bank. After you report, the bank bears it.
- The bank must credit a disputed amount (a “shadow reversal”) within 10 working days of being told, and resolve the complaint within 90 days.
The lesson: report to the bank the same day, and never share credentials, because sharing them shifts the loss to you.
Reporting fraud calls and messages on Chakshu
If a call, SMS or WhatsApp message looks like fraud but you have not lost money, report it on Chakshu, a facility on the Department of Telecommunications’ Sanchar Saathi portal. It covers suspected fraud such as fake KYC, impersonation of officials, and fake loan or investment offers, as well as spam calls and SMS. The portal says plainly that Chakshu is not for financial fraud or cyber crime; for those, use 1930 or cybercrime.gov.in.
Sanchar Saathi also lets you:
- See all mobile connections issued in your name and report any you do not recognise (useful if your ID was misused).
- Block a lost or stolen phone.
- Report international calls showing a +91 Indian number.
Tips for women running businesses from home
- Use a separate business number and business UPI ID, so personal and order traffic do not mix.
- Do not publish your home address; share a pickup point or area only with confirmed buyers.
- Agree with family members who help with orders that no one shares OTPs or scans buyer QR codes.
- Keep a printed list of 1930, your bank’s helpline and your courier’s helpline near where you pack orders.
FAQ
Q: A buyer sent a QR code to pay me. Is that safe?
A: No. You receive money through your own QR code or UPI ID. Scanning someone else’s QR code and entering your PIN sends money from your account.
Q: The payment screenshot looks real but my bank app shows nothing. What now?
A: Do not ship. Only money shown in your bank or UPI app’s history has arrived.
Q: Should I call 1930 or use Chakshu?
A: If you lost money or were hacked, call 1930 or use cybercrime.gov.in. If you only received a suspicious call or message, report it on Chakshu.
Q: I shared an OTP by mistake. Will the bank refund me?
A: Under RBI rules, you bear losses caused by sharing credentials until you report to the bank, so report immediately to stop further loss.
Q: Someone called claiming to be a GST officer. How do I check?
A: Do not pay or share details on the call. Log in to the GST portal yourself to check for notices, or ask your accountant.
Q: A caller offered a government loan if I pay a processing fee.
A: Treat it as a scam. Apply for schemes only through official portals or your bank branch.
Official links
- National Cybercrime Reporting Portal: https://cybercrime.gov.in
- Sanchar Saathi (Chakshu and mobile connection check): https://sancharsaathi.gov.in
- RBI complaint management system (Ombudsman): https://cms.rbi.org.in
- GST portal: https://www.gst.gov.in
- National Consumer Helpline: https://consumerhelpline.gov.in
Last checked: October 2026. Rules, limits and fees change; confirm with the official source before you apply. This guide is general information, not legal, tax or financial advice.
Sources: Sanchar Saathi portal, Department of Telecommunications (October 2026); RBI circular on customer liability in unauthorised electronic banking transactions (July 2017); National Cybercrime Reporting Portal, as referenced on Sanchar Saathi (October 2026).
