No app should be your only defence
The rules that hold on their own, a blunt account of where WallUPI stops being useful, and what to do in the hour that matters most.
Six rules that stop almost everything
None of them need an app or any technical knowledge. They work because every scam needs you to break at least one.
-
Never read out a code
No bank, payment app or government office will ever ask for the code they just sent you. Anyone who does is trying to get into your account.
-
Receiving money never needs your PIN
Your PIN authorises money leaving. If you are told to approve a request or enter a PIN to be paid, they are taking, not giving.
-
Hang up and call back yourself
If a caller says they are your bank, end the call and dial the number printed on your card. A real bank will not mind. A scammer cannot survive it.
-
Urgency is the tell
Real problems with your account survive ten minutes. Every scam is built to stop you taking them, so pressure itself is the warning sign.
-
Don’t open the link, open the app
If a message says something is wrong, close it and open your banking app directly. If the problem is real, it will be waiting for you there.
-
Say it out loud to someone
Scams depend on isolation. Telling one other person what you are being asked to do breaks it more reliably than any software.
What WallUPI cannot do
A safety product that oversells itself makes people less careful, which makes them easier to rob. So this part is deliberately blunt.
-
It cannot catch every scam
A patient fraudster with no threatening message, no phone call and an ordinary-looking request can still get through.
-
It cannot get your money back
Once a UPI transfer completes it is effectively final. Everything WallUPI does happens before that point, because after it there is very little anyone can do.
-
It cannot overrule you
Every warning can be read and dismissed. It is your money, and a layer that blocks payments outright would be worse than useless the first time it was wrong.
-
It will sometimes be wrong
An unusual but perfectly genuine payment can be flagged. A warning is information, not an accusation.
-
It is not a bank
WallUPI is a safety layer, not a payment provider. It never holds your money, and the downloadable app is a demonstration UPI app in which no real money moves.
Speed matters more than anything else
1930National cybercrime helpline. Call it first, ideally within the hour, while a freeze can still reach the money.
- 01
Call 1930 before you do anything else.Straight away
- 02
Report it at cybercrime.gov.in. It creates the formal record your bank will need.Same hour
- 03
Tell your bank through its official app or the number on your card, and ask them to flag the transfer.Same hour
- 04
Keep everything: messages, the calling number, screenshots, the transaction reference. Then change your PIN.Before you forget
Don’t let anyone “help” you recover it
People who have just been scammed are often targeted again within days by someone offering to get the money back for a fee. There is no such service. Recovery only runs through your bank and the police.
The helpline and portal above are official Government of India services and the correct route for reporting financial fraud. WallUPI is not affiliated with them.
If a scam reached you, tell us how it was worded
The exact wording is genuinely useful. The survey takes a few minutes and shapes what gets checked next.