Digital Banking Safety Guide: Protect Your Money From Online Scams and Fraud

Why digital safety matters

Mobile banking, internet banking, cards and UPI make everyday payments fast. The same speed can help fraudsters pressure people into acting before they think. A scam may arrive as a fake delivery message, a KYC warning, a refund offer, a customer-care number in a search result, a QR code or a call claiming that an account will be blocked.

The central rule is that a secret credential must remain secret. The Reserve Bank of India warns customers not to share passwords, PINs, OTPs, CVVs or UPI PINs with anyone. A person who claims to be from a bank, police department, courier company or payment service does not become trustworthy merely by knowing your name or some account details.

Protect your PIN, OTP and passwords

Never read an OTP aloud or send it in a message. Do not share a UPI PIN, card PIN, internet-banking password or CVV with a caller. Genuine support staff should not ask you to disclose these secrets. Avoid writing PINs on a card, storing them in an unprotected notes app or reusing the same password across important accounts.

Use a strong, unique password for banking and enable device security such as a screen lock. Where the bank offers multi-factor authentication, keep it enabled. Do not approve a login or payment notification that you did not initiate. A request that arrives unexpectedly deserves a pause and an independent check.

UPI: check what you are approving

UPI is an instant payment system that moves money between bank accounts. A UPI PIN is used to authorise a payment transaction. Before entering it, read the screen carefully: check the recipient name, amount and whether the action is a payment or a collect request. Never approve a request simply because someone says it is needed to receive a refund, prize or parcel.

Do not scan an unfamiliar QR code or follow a payment link because a stranger asks you to. A QR code is not a magic way to receive money; it can lead you into an action that sends money. If the screen, name or amount does not match what you expect, cancel and verify through a known, official channel.

Spot common warning signs

• Urgency: “Your account closes in ten minutes” or “act now to avoid arrest”.
• Secrecy: you are told not to speak to family or visit the bank.
• Remote access: someone asks you to install an app or share your screen to fix a payment.
• Too-good-to-be-true offers: guaranteed rewards, unexpected refunds or prizes you never entered to win.
• Unverified support: a phone number or link sent by an unknown person or social-media account.

Do not trust caller ID alone; numbers and display names can be misleading. Find the bank’s contact details in its official app, on the card or on its verified website. Type the website address yourself rather than following a link in a suspicious message.

Secure your devices and connections

Install banking apps only from official app stores and confirm the publisher. Keep the operating system and apps updated. Avoid financial transactions on public or shared Wi-Fi; use a trusted connection and log out when finished. Do not let another person operate your banking app or keep your phone unlocked when it is unattended.

Turn on SMS or app alerts for transactions and check them. Review account statements regularly. If your phone or SIM is lost, contact the mobile operator and bank through official channels. If a card is lost or stolen, ask the issuer to block it immediately.

What to do if you suspect fraud

1. Contact your bank immediately using a verified number or official app. Ask it to block the affected channel, card or account access as appropriate.
2. Report the transaction and preserve reference numbers, messages, call details and screenshots. Do not delete evidence.
3. In India, report cyber financial fraud promptly through the national cybercrime helpline 1930 or the official portal at cybercrime.gov.in. Speed matters because funds may move quickly.
4. Change compromised passwords from a trusted device and review other accounts that used the same password.
5. Follow the bank’s complaint process and keep the complaint acknowledgement for future reference.

Do not pay a person who promises to recover lost money for an upfront fee. Recovery scams often target people who have already been defrauded. Use official bank and government reporting channels.