An airline refund message asks for your UPI PIN: do not authorise a payment to receive money

Receiving money is not authorising a debit

A message promising an airline refund may ask you to open a link, scan a QR code or enter a UPI PIN. Do not follow a stranger's instructions to authorise a payment in order to receive money. NPCI's fraud-awareness page says a UPI PIN is for payments, not receipts, and warns that scanning a QR code and entering the PIN is for making payments rather than receiving them. It also says never to share the PIN or debit-card credentials with a third party.

AI-generated fictional photographic-style scene of an Indian traveller placing an unmarked phone face down to pause. It is not an actual refund message, payment screen or customer.

Keep that distinction precise: this does not mean every use of a PIN anywhere in an app is a debit, or that merely opening a banking app authorises a transfer. The issue here is an unexplained payment authorisation presented as receipt of a refund. Read what the genuine app asks you to approve; do not accept the caller's explanation in place of it. This article does not describe the screen flow of every UPI app or payment product.

Verify the refund through the actual seller

Open the genuine airline website/app or the issuing agency's established channel independently. Do not use the number or link inside the suspicious refund message to verify itself. Ask about the actual booking, refund status, amount, expected method and reference. If the ticket came from an agency, clarify which party handles the refund rather than assuming the airline can pay it directly.

A caller knowing your name, flight or cancellation does not prove they are authorised to collect information or change the payout destination. Do not give them passwords, OTPs, full card details, UPI PINs or remote access. A refund request does not require granting an unknown person control of the phone. No particular airline's refund route, deadline, bank detail requirement or entitlement is established here.

If you opened the link or entered information

Stop interacting through that route and do not approve further requests. Contact your bank or payment provider through its genuine app/site or another established route. Explain separately whether you only opened a page, typed credentials, installed software or authorised a payment. Those are different exposures; do not claim money was taken without checking the account record.

Ask the provider which protective steps apply. NPCI warns against remote-access or screen-sharing apps during financial transactions because they can expose the screen or access. Do not continue a financial transaction while an unknown person guides you on a call. If login credentials were exposed or reused, review security through the genuine service. No universal bank remedy or device-cleanup procedure is prescribed here.

Preserve the payment trail and report suspected fraud

Keep the sender identifier, message, link as text, dates, claimed airline/refund amount, and genuine payment or bank records. The National Cybercrime Reporting Portal's checklist asks for incident details and time, relevant evidence, and financial institution/merchant, transaction reference, date and amount for financial fraud. Do not post the evidence bundle or financial details publicly.

I4C identifies 1930 and the National Cybercrime Reporting Portal as financial-cyber-fraud reporting routes in India. Report promptly when fraud is suspected, alongside contacting the bank, and retain acknowledgements. Do not wait for a recovery agent or pay another fee to release the supposed refund. A report does not guarantee recovery; an airline refund claim and a fraud complaint may need separate tracking.

Sources and limits

Checked 13 November 2026: NPCI fraud awareness; National Cybercrime Reporting Portal evidence checklist; I4C financial cyber-fraud reporting. No clear current revision dates were established for these passages. No actual message, airline refund, transaction, bank remedy, device-cleanup method or recovery outcome is assessed. This is payment-safety guidance, not an airline refund entitlement or a description of every UPI product.