Back
How to Verify a UPI Merchant Before Paying
UPI payments settle in seconds, which is exactly what makes them convenient and exactly why a mistaken or fraudulent payment is so hard to undo once it is authorized. Unlike a card payment, there is usually no chargeback process to fall back on if you scan a fake QR code or approve a request from someone impersonating a real business. A few seconds of verification before you enter your PIN is the entire defense, and it is a genuinely effective one if you build it into habit.
Why This Deserves More Than a Glance
Once a UPI payment is authorized, reversing it is difficult in most cases, since the money has already moved through the same real-time rails that make UPI useful in the first place. Fraudulent actors exploit this by using fake UPI IDs, misleading QR codes, impersonating recognizable brand names, or sending collect requests dressed up to look legitimate. None of these tricks require sophisticated technology, which is exactly why basic verification habits are disproportionately effective against them.
Checking the Merchant Name in UPI Before You Pay
Every UPI app displays the recipient's name once you scan a QR code or enter an ID, and this single screen is your best and quickest verification checkpoint. Read it carefully rather than glancing past it, and match it against the business name you actually expect. Even a small spelling difference, an extra character, or an unfamiliar-looking name where you expected something specific is worth pausing over before you proceed.
Why it matters: Fraudulent QR codes often route to accounts registered under names that look plausible at a glance but do not exactly match the real business, banking on users not reading closely under time pressure.
Understanding the UPI Verified Badge
Some UPI apps display a verified badge or checkmark next to certain merchant accounts, typically indicating the app or NPCI's ecosystem has performed some level of onboarding verification on that business. This is a useful signal, but it is not a universal guarantee, since not every legitimate small merchant will have gone through the process to earn a badge, and the presence or absence of one should be treated as one input among several rather than the sole basis for trust.
A Practical Pre-Payment Checklist
1. Read the merchant name displayed after scanning and match it against what you expect, not just a glance.
2. Confirm the UPI ID format looks like a real business identifier rather than a random or unclear string.
3. Scan QR codes only from trusted physical or verified digital sources, never from unsolicited links or messages.
4. Never authorize a collect request you did not expect, and remember that receiving money never requires entering your UPI PIN.
5. Check the transaction confirmation screen inside the app itself rather than trusting a forwarded screenshot or verbal claim.
Collect Requests Deserve Extra Caution
A collect request lets someone request payment from you, and approving one authorizes an outgoing payment exactly as if you had scanned a QR code yourself. Scammers frequently disguise these as refunds, prize claims, or cashback offers, counting on the victim not realizing that entering a PIN in response to a collect request sends money out rather than bringing it in. If you did not initiate the interaction yourself, decline any unexpected collect request rather than approving it out of politeness or curiosity.
| Warning Sign | What It Usually Means | Safer Action |
|---|---|---|
| Merchant name does not match expectation | QR code may be fake or tampered with | Cancel and verify through another channel before retrying |
| Urgent payment demand via message | Common social engineering tactic | Ignore and verify independently, never rush a payment |
| Unexpected collect request | Possible scam disguised as refund or cashback | Decline; remember receiving money never needs a PIN |
For Online Purchases Specifically
When paying a merchant through a website or app rather than a physical QR code, verify the platform's credibility first, check for reviews or ratings where available, and confirm you are on the official payment page rather than a spoofed one before entering any details. Sticking to well-known, established platforms for UPI-based purchases meaningfully reduces exposure to fake storefronts.
If You Suspect You Have Already Been Scammed
Contact your bank or UPI app's support immediately, since faster reporting improves the odds of any possible recovery action. Report the transaction through official channels rather than relying on informal complaints, keep monitoring your account activity closely afterward, and change your UPI PIN or app credentials if you suspect any compromise beyond the single fraudulent transaction.
Stashfin's UPI Money Transfer is built with this same verification step in mind. Every Scan & Pay transaction, whether to a mobile number, a UPI ID, or your own bank account, shows the receiving party clearly before you confirm, so the habit of checking the name on screen fits naturally into how you already pay.
Key Takeaways
Verifying a UPI merchant before paying comes down to a handful of quick habits: reading the merchant name in UPI carefully rather than glancing past it, checking that the UPI ID format looks legitimate, scanning QR codes only from trusted sources, and never approving an unexpected collect request. A verified badge is a helpful signal but not a complete guarantee on its own. Because UPI payments are difficult to reverse once authorized, these few seconds of checking before you enter your PIN are genuinely the strongest protection available.
