NPCI outlines five precautions to protect digital payments during festive shopping
The payments network advises users to shop through official platforms, avoid external payment links, protect OTPs and verify unsolicited cashback offers to prevent festive-season fraud.
NPCI cautions that scammers use such situations to carry out social engineering attacks and steal personal and payment information.
NEW DELHI: The National Payments Corporation of India (NPCI) has outlined five safety measures for consumers to protect their digital payments during the festive season, warning that fraudsters exploit increased shopping activity, attractive offers and time-sensitive promotions to deceive users.
With festive shopping across online and offline channels often driven by discounts, cashback deals and limited-period offers, consumers may make hurried decisions or fall for promotions that appear too good to be true. NPCI cautions that scammers use such situations to carry out social engineering attacks and steal personal and payment information.
The organisation has recommended the following precautions:
Shop only through official apps and websites
Consumers should use official shopping applications and websites rather than links received through unsolicited messages. NPCI advises users to type website addresses themselves or access platforms through their official apps. Unknown links and downloads, including those claiming to offer festive deals or greeting cards, may lead to fraudulent websites or expose devices to harmful software.
Complete payments within the shopping platform
Users should avoid requests to transfer money through external UPI IDs or payment links outside the shopping application or website. Payments should be completed through the platform’s official checkout process after verifying the seller’s details.
Verify cashback and voucher offers
Unsolicited messages promising cashback, rewards or festival gifts may be attempts to obtain OTPs, account details or upfront payments. NPCI advises consumers not to share sensitive information or pay fees in response to such messages. Offers should instead be checked directly through the official app or website.
Never share OTPs received unexpectedly
Messages claiming that a payment has failed or an account has been blocked may be used to pressure users into sharing OTPs. NPCI emphasises that OTPs are meant to authenticate transactions initiated by users and should never be disclosed to anyone contacting them through calls or messages, even if the person claims to represent a bank or payment application.
Avoid acting under pressure
Scammers often create urgency by claiming that an offer is about to expire or an account will be blocked unless immediate action is taken. Consumers should pause and verify such claims through official applications, websites or customer support channels before responding.
NPCI has also recommended a simple ‘Stop, Think, Act’ approach to digital payment safety. Users should stop when they receive unexpected requests, think before sharing information or making payments, and act only after verifying the source.
NPCI is the umbrella organisation responsible for operating retail payment and settlement systems in India. Established by the Reserve Bank of India and the Indian Banks’ Association, it operates payment systems including Unified Payments Interface (UPI), RuPay, Immediate Payment Service (IMPS), National Automated Clearing House (NACH) and National Electronic Toll Collection (NETC).
