Cybersecurity experts warn Indians about a frozen-screen UPI scam that uses fake glitches to trigger financial fraud. The scam often begins after victims click suspicious advertisements, messages, or unfamiliar links. Fraudsters then create panic through frozen screens, fake errors, or urgent calls from alleged bank support teams.
The method combines social engineering, malicious apps, and device permissions to steal sensitive banking information and enable fraudulent UPI transactions.
The latest warnings emerged in India on September 7, 2026, as cybersecurity experts highlighted the growing UPI Fraud risk. The attack does not necessarily target UPI encryption itself, but instead exploits compromised devices, credentials, and authentication processes. Harish Kumar, CEO of Quick Heal Technologies, said the frozen screen is often ‘not the real event, but the distraction.’
After the freeze, scammers may pose as customer support agents and recommend suspicious applications. These apps can request accessibility, notification, SMS, or device-control permissions. Such access can expose OTPs, monitor screens, and potentially assist fraudulent transactions.
Ruchin Kumar of Futurex said attackers generally target the transaction process rather than breaking UPI security. Social engineering can also convince victims to enter UPI PINs or approve transactions themselves.
A frozen screen after an unfamiliar link should therefore trigger immediate caution. Experts recommend disconnecting mobile data and Wi-Fi before entering banking information. Suspicious applications and unnecessary permissions should also face immediate removal.
Financial institutions should receive reports through official channels after any suspected compromise. The national cybercrime helpline 1930 can handle reports involving financial cyber fraud.