Data & safety

UPI payment safety when selling a phone

UPI is the safest way to be paid for a phone and the easiest to fake convincingly. The difference is in what you check.

Illustration of a UPI payment confirmation on a phone screen

The one rule

Money is received when it appears in your app. Not when a buyer shows you a screenshot, not when they show a "processing" screen, not when they read out a reference number. Open your own banking or UPI app, refresh, and look at your own balance.

Fake payment screenshots are trivially produced and endlessly circulated. Treating them as evidence is the single most common way sellers lose a phone.

Requests that always mean a scam

  • "Scan this QR to receive the payment." Scanning a QR and entering your PIN sends money. There is no receiving QR.
  • "Enter your UPI PIN to confirm the credit." A PIN is only ever needed to pay.
  • "I've sent extra by mistake, please return the difference." The original transfer will be reversed; the refund you send will not.
  • "Share the OTP so the transfer completes." No legitimate transfer needs your OTP.
  • "Install this app so I can pay you." Remote-access apps let someone operate your phone.

A safe sequence at the door

  1. Agree the final figure out loud before anything changes hands.
  2. Ask for the payment while you are still holding the phone.
  3. Open your own UPI or banking app and refresh until the credit shows.
  4. Check the amount, not just the notification.
  5. Note the order ID or receipt from the buyer's side.
  6. Hand over the phone and any agreed accessories.

Cash, bank transfer and everything else

Cash is fine for small amounts and slow to count for large ones; check notes in daylight. NEFT and IMPS are safe but not instant — a transfer initiated at your door may take minutes to hours, and "it will show up soon" is not a position to hand a phone over from.

Avoid: cheques, wallet balances you cannot withdraw, part-payment with the rest "after I check it at home", and any payment routed through a third person.

Selling through a service

The reason organised pickup works is that the payment step is standardised: a fixed figure agreed in advance, an inspection in front of you, and an instant transfer before the rider leaves. That is how our own pickups run, and it removes the negotiation that makes private sales risky.

What to do if you have already been cheated

Speed matters more than anything else. India's reporting routes work best in the first few hours, while funds may still be traceable.

  1. Call the national cybercrime helpline 1930 immediately — it is designed for exactly this and can flag transfers quickly.
  2. File a complaint at cybercrime.gov.in with the transaction reference, the UPI IDs involved and any chat history.
  3. Report it inside your UPI app, which raises a dispute with the payment service provider.
  4. Tell your bank in writing the same day, and keep the acknowledgement.
  5. If the phone was handed over, report the IMEI as lost or stolen on the CEIR portal so the handset can be blocked.

Keep screenshots of everything, including the listing and the messages. A complaint with a transaction reference and a timeline is treated very differently from one without.

Frequently asked questions

How do I confirm a UPI payment is real?
Open your own UPI or banking app and confirm the credit and the amount there. A buyer's screenshot, reference number or "processing" screen proves nothing.
Should I ever enter my UPI PIN to receive money?
No. A UPI PIN authorises money leaving your account. Anyone asking for it in order to "send" you money is trying to take it.
Is it safe to scan a buyer's QR code?
No. Scanning a QR code and approving it sends money from your account. There is no such thing as a QR code that pays you.
What if the buyer says they sent extra by mistake?
Do not refund anything. This is a standard scam in which the original payment is reversed and only your refund is real.
What should I do if I am cheated during a phone sale?
Call 1930 immediately, file at cybercrime.gov.in with the transaction reference, raise a dispute in your UPI app and with your bank the same day, and report the IMEI on CEIR so the handset can be blocked.