How to verify a payment link or QR code before paying

You only need a UPI PIN to send money, never to receive it. To verify a UPI payment link, tap it to open your app and check the merchant name before entering any PIN. Scanning a QR code does not deduct money from your bank account. Learn how to spot a collect request scam and verify UPI IDs.

By Qrates research desk · 2026-10-27

To verify a UPI payment link, tap it to open your UPI app and look at the payment screen before entering any PIN. You can check the registered merchant name fetched directly from the bank to confirm who is receiving the money. A UPI PIN is only required to send money, never to receive it (npci.org.in).

Quick answer: how to verify a UPI payment link or QR code

You only need a UPI PIN to send money, never to receive it. If a message tells you to enter a PIN to get a refund or a prize, it is a collect request scam.

To do a fake UPI payment link check, tap the link to open your UPI app and look at the payment screen. Do this before entering any PIN. The app will show you the exact name of the person or business registered to that account.

Check the merchant name against the new 2026 NPCI bank-name verification display. The NPCI mandates merchant name verification to display verified names from banks on UPI payment screens. If you are paying a stock broker, look for the SEBI verified handle.

What you need before you start

You need the SMS payment link, WhatsApp payment request, or physical QR code in front of you. Do not forward the link to anyone else while you check it. Keep your phone screen unlocked and ready.

You also need your primary UPI app installed on your phone, such as BHIM UPI. You can check the Qrates payments and UPI apps directory to ensure you are using a licensed app. An updated app will have the latest security warnings.

Finally, you need an active internet connection to fetch the real-time Virtual Payment Address details. The app cannot verify the merchant name with the bank if your phone is offline. A weak connection might cause the verification screen to load slowly.

Step-by-step: how to check a payment link or QR code

Step 1: Inspect the message before you click

Do not click links from unknown numbers that promise cash prizes or urgent refunds. Scammers often use panic or excitement to make you act quickly. Read the text around the SMS payment link carefully.

If the message claims you have received money but asks you to click a link to claim it, stop immediately. You never need to click a link or enter a PIN to receive money into your bank account. Legitimate refunds are credited automatically by your bank.

Check the sender's phone number or profile. A genuine WhatsApp payment request from a business will usually come from a verified business account. You can learn more about identifying fake customer care numbers to avoid common phishing attempts.

Step 2: Open the link or scan the code

Scan the QR code using your UPI app scanner. This will load the payment screen without deducting money from your bank account (npci.org.in). You can open the scanner to read the details without any risk to your funds.

Scanning a UPI QR code or clicking a payment link does not deduct money from a bank account. The camera or the link only tells your app which Virtual Payment Address to look up. The transaction remains paused at this stage.

Your app will now connect to the bank to fetch the details. Wait for the payment screen to load fully before you tap anything else. Do not type any numbers while the screen is loading.

Step 3: Read the UPI app warning and merchant name

Look at the top of the payment screen for the registered merchant name fetched directly from the bank. This name cannot be hidden or changed by the person receiving the money. It reflects the exact name on their bank account.

Check for any red UPI app warning banners that flag a collect request scam or a suspicious receiver. Apps like BHIM UPI will show a warning if the account has been reported for fraud in the past. Pay attention to these alerts.

Compare the details on your screen to spot a payment link scam check.

Feature	Genuine payment request	Collect request scam
Action required	You send money to a merchant	You are asked to enter a PIN to receive money
App warning	None	Red banner warning of a suspicious request
Merchant name	Matches the business name exactly	Shows an unknown individual's name
UPI PIN	Required to complete your payment	Requested by the scammer to steal your money

Step 4: Verify the UPI ID before payment

Read the Virtual Payment Address carefully to ensure it matches the business. Scammers often create IDs that look similar to famous brands by changing one letter. A genuine business will use a clear, official ID.

For investments, match the UPI ID exactly with the SEBI verified handles listed on the broker's official website. Stock brokers are required to use SEBI-verified handles for UPI transactions. This rule protects your investment capital.

You can cross-check official broker names in the Qrates stock broking and trading apps directory. If the handle on your screen does not match the official records, do not proceed with the transfer.

How long it takes and what it costs

Verifying a payment link takes less than a minute. Your app fetches the bank details instantly as soon as you scan the code or tap the link. You do not have to wait in a queue.

Checking a merchant name or UPI ID costs nothing. The banks and the NPCI provide this verification service for free to prevent fraud. You can check as many links as you need to.

Scanning a QR code is free and does not deduct money from your account (npci.org.in). You only transfer money when you type your secret UPI PIN and press confirm.

If it does not work: what to do if you spot a scam

If the merchant name does not match who you think you are paying, cancel the transaction immediately. Close the app and delete the SMS payment link or WhatsApp payment request. Do not reply to the sender.

If it is a fraudulent collect request, tap the decline or block button in your UPI app. Blocking the request ensures that the specific Virtual Payment Address cannot send you another prompt. This keeps your inbox clean.

If you already entered your UPI PIN and money was deducted, follow these exact steps to recover funds after UPI fraud:

Call the cyber fraud helpline 1930 right away.
Note down the transaction reference number from your bank SMS.
Report the fraudulent Virtual Payment Address on the National Cyber Crime Reporting Portal.
Contact your bank's customer care to block your UPI ID temporarily.

Frequently Asked Questions

How to check if a payment link is safe?

A payment link is genuine if it opens your official UPI app and displays a verified merchant name matching the business you are paying. Always read the payment screen before typing your PIN. If the app shows a warning banner, cancel the transaction immediately.

Can I get scammed just by scanning a QR code?

Scanning a UPI QR code or clicking a payment link does not deduct money from a bank account (npci.org.in). The scanner only reads the UPI ID and the amount requested. Money cannot leave your account until you type your UPI PIN.

Do I need to enter a UPI PIN to receive money?

You never need a UPI PIN to receive money. A UPI PIN is only required to send money (npci.org.in). If a message or an app asks for your PIN to process a refund, it is a collect request scam.

What happens if I click on a fraudulent payment link?

Clicking a suspicious link might open a fraudulent website or trigger a collect request in your app. You can stop the transaction by closing the app and not entering your PIN. Do not download any files the link tries to send you.

How to know if QR code is genuine?

A genuine QR code will load a verified merchant name on your UPI app screen. It will not trigger a red warning banner from your bank. You can verify the UPI ID before payment by checking the exact spelling on the screen.

How do I report a payment link scam check?

You can report a fraudulent Virtual Payment Address directly through your UPI app by tapping the block or report button. You should also call the 1930 helpline if you lost money. The National Cyber Crime Reporting Portal accepts online complaints for UPI fraud.

The short version

A UPI PIN is only required to send money, never to receive it.
Scanning a QR code or clicking a link does not deduct money until you enter your PIN.
The NPCI mandates that UPI apps display the verified merchant name from the bank.
Stock brokers must use SEBI-verified handles for all UPI transactions.
You can report a fraudulent Virtual Payment Address by calling the cyber fraud helpline 1930.

You can visit the Qrates apps directory to check the latest figures and details for yourself.