Fake Payment Apps — Malware Disguised as UPI Tools
Not every app claiming to help with cashback, loans, or "better UPI rates" is what it says it is.
What this scam looks like
An app — shared via a link outside the official app store, or found through an ad promising extra cashback or rewards — asks you to enter your UPI PIN, bank details, or grants itself permissions to read your SMS messages (often used to intercept OTPs). Once installed, it can quietly capture your credentials or authorise transactions without your knowledge.
Why it works
Apps distributed outside the Play Store or App Store (via APK links, WhatsApp forwards, or ads) don't go through the same security review, so malicious functionality can be hidden inside something that looks like a normal utility. Broad permission requests — like reading all SMS messages — are often buried in an installation flow people click through quickly.
Red flags to watch for
- Being asked to download an APK file directly rather than installing from the Play Store/App Store
- An app requesting SMS-reading permissions with no clear reason tied to its function
- Unusually generous cashback, loan, or reward offers that require installing a specific app first
- Apps with very few reviews, recent publish dates, or unclear developer information
How to protect yourself
Only install payment-related apps from the official Play Store or App Store, and check the developer name matches the real company. Be cautious of any app requesting permissions unrelated to its core purpose — a "UPI cashback" app has no legitimate reason to read all your text messages. When in doubt, search the app name plus "scam" or "fake" before installing.
If this has already happened to you
Uninstall the app after screenshotting it for evidence, then follow the steps on our "I've Been Scammed" page immediately.
This article is general awareness information, not legal advice. See our disclaimer for details.