Man duped of ₹2.28 lakh in UPI refund scam while travelling for mother's funeral
What began as a payment error at a toll gate turned into a financial scam for a 42-year-old private employee from Hyderabad, who ended up losing over ₹2.28 lakh to an online fraudster posing as a representative of Unified Payments Interface (UPI).
The victim was en route to Karnataka to attend his mother's funeral and booked a cab for ₹11,000. After paying ₹4,000 for fuel, he agreed to pay the remaining ₹7,000 upon arrival. However, at a toll gate, he mistakenly scanned a QR code linked to SBI FASTAG NETC, intending to pay the driver but instead it was an unrelated payment.
Alarmed, he reported the issue to Canara Bank's Emmiganuru branch, which acknowledged the complaint and advised him to contact UPI officials. Searching online for help, the victim found a phone number claiming to be from the National Payments Corporation of India (NPCI). Trusting the source, he called it, unaware that it was part of an elaborate scam.
The man on the other end, claiming to be a UPI support agent, instructed him to lodge a complaint and promised a swift refund. To facilitate the refund, the fraudster convinced the victim to transfer money using the PhonePe app, claiming the amount would be instantly returned. He was then told the transaction was 'on hold' and asked to send more funds to complete the process.
Misled and desperate to recover his money, the victim followed further instructions, including opening his Canara Bank mobile app, increasing his credit limit, and sharing sensitive ATM and OTP details. The fraudster used this information to siphon off the remaining funds. Despite repeated follow-ups and assurances of a full refund within five minutes, the victim received no money. The fraudster eventually became unreachable.
The victim lodged an online complaint on cybercrime portal. The case is under investigation.
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
News18
an hour ago
- News18
Cyber Fraud Hits Aditya Birla Capital App, Rs 1.95 Crore Digital Gold Stolen
Last Updated: A hacker broke into Aditya Birla Capital's ABCD app and tampered with its system. A major cyber fraud has been reported from Mumbai's Prabhadevi area, where a hacker targeted Aditya Birla Capital Digital Limited's mobile app, known as 'ABCD." The unknown attacker gained access to the app's system and made technical changes. He then illegally sold digital gold worth around Rs 1.95 crore from 435 user accounts. According to The Free Press Journal, the fraud came to light when several customers contacted the company's helpline. They complained that their digital gold had been sold without their knowledge or approval. Alarmed by the calls, the company's technical team began investigating and soon discovered signs of a security breach. Following this, Aditya Birla Capital filed a police complaint with the Central Region Cyber Police Station in Mumbai. The complaint was submitted by Ravindra Rajmal Chaudhary, Head of Fraud Risk Management at the company, The Free Press Journal states. According to the Cyber Cell, the fraud took place on June 9. The hacker reportedly breached the application programming interface (API) that connects the ABCD app with the company's server at By exploiting this technical link, the hacker easily bypassed the OTP (one-time password) security layer and successfully sold digital gold from hundreds of customer accounts. For those unaware, the ABCD app offers various financial services, including the buying and selling of digital gold and silver, mutual funds, UPI, and insurance. The company uses MMTC-PAMP, a government-approved firm, for digital gold transactions. In addition, the payments are processed through Razorpay, an India-based fintech and payment gateway company. Once the fraud was confirmed, the digital gold-selling feature on the app was immediately suspended to prevent further misuse. The company's information security team reportedly conducted a thorough internal check and verified that the breach did result in unauthorised digital gold sales from 435 user accounts. A full report, including user details and technical logs, has been submitted to the Mumbai Cyber Cell. The cybercrime team has launched a detailed investigation to identify the hacker and recover the stolen funds. Further action is currently underway. Meanwhile, this case has raised serious concerns about app security and the growing risks of digital financial fraud in India. First Published:
New Indian Express
2 hours ago
- New Indian Express
Ahead of Rath Yatra, Crime Branch takes down 11 fake websites for booking hotels
BHUBANESWAR: Ahead of Rath Yatra, the Crime Branch of Odisha Police took down 11 fake hotel booking websites to ensure pilgrims and tourists have a hassle free experience during the festival. The agency received 317 complaints through cyber crime helpline number in the last few days about the fake hotel booking websites and went after them. Many fake websites mimicked the portals of famous hotels and those run by Odisha Tourism Development Corporation (OTDC). Some of the fake websites removed include , and among others. Sources said the social media team of CB has been continuously monitoring online platforms to detect fake hotel booking websites. 'We are keeping a close eye on such fake websites. Once such websites comes to our notice, immediate action is taken to bring them down. To ensure safety of citizens and to keep them informed, awareness posts on fake hotel booking scams are being shared across our cyber safety social media platforms,' said the CB in a statement on Wednesday. Lately, hotel booking scams have witnessed a rise in the state, especially in Puri, Bhubaneswar and Cuttack. Fraudsters have been creating fake websites and social media pages that look genuine, offer cheap rates. They also demand full payment via UPI, wallets or bank transfers using fake customer care numbers and receipts. The probe agency said many such fake sites appear on top of Google search results, making difficult to ascertain their genuineness. Victims often realise about the scam only after reaching the hotels. Several complaints regarding fraudulent hotel deals have been received through helpline 1930 and from various government departments as well as the hotel owners. Meanwhile, it has issued an advisory to visitors to book hotels only through verified platforms like Make My Trip, Goibibo, or official tourism websites.
Hindustan Times
4 hours ago
- Hindustan Times
Hackers sell 436 users' digital gold on finserv app
MUMBAI: After a hacker sold digital gold of Aditya Birla Capital Digital (ABCD) Limited's 436 customers, causing the company a loss of ₹ 1.95 crore, the Central cyber police registered a case of cheating Tuesday. Hackers sell 436 users' digital gold on finserv app ABCD Ltd purchases digital gold from government-approved MMTC-PAMP. Through the company's app, users can buy and sell various financial products like digital gold, silver, UPI, mutual funds and insurance. Users can register to buy using their mobile number. For selling this digital wealth, however, they will receive an OTP to access the payment gateway via which they can get the money. Earlier this month, ABCD's technical team observed the application programming interface was compromised, said a police officer. An unidentified hacker sold the digital gold and transferred the money to their bank accounts. 'On June 9, 2025, customers began calling the company's call centre claiming that their digital gold was sold by someone else without their permission and they have not received any money. The company immediately stopped the digital gold-selling in the application,' said a police officer. By the time they realised it, the hacker had already sold digital gold belonging to 436 customers, causing a ₹ 1.95-crore loss to the company. Ravindra Chaudhary, head of fraud risk management at Aditya Birla Capital Digital Limited, filed a complaint with the police. A case was registered under sections 318 (4) (cheating) and 319 (2) (cheating by personation) of the Bharatiya Nyaya Sanhita, 2023, and relevant sections of the Information Technology Act, 2000.
