The rapid adoption of digital payments through UPI has made transactions more convenient across India. However, this boom has also led to a dramatic increase in cyber fraud, organised crime, and vulnerabilities in the ecosystem, challenging authorities to keep pace with criminals exploiting newfound trust.
India’s digital payments boom has made everyday life easier, but it has also widened the opening for cyber fraud
At a roadside tea stall, a QR code taped to a biscuit tin now does the work of a cash box. That convenience has become ordinary across India, where a vegetable seller, an auto driver and a doctor may all be paid through the same digital rail. Unified Payments Interface, or UPI, has become central to that shift, and the scale is striking: the Status of Policing in India Report 2026 says UPI handled more than 24,000 crore transactions in the 2025-26 financial year, with total value crossing ₹314 lakh crore. The report argues that the same mass adoption that makes digital payments efficient also makes them a prime target for cybercriminals.
That trust is not accidental. The report says nearly half of respondents use UPI apps every day, and another quarter use them at least once or twice a week. UPI is also the most common online payment method, far ahead of cards, wallets and bank transfer systems such as NEFT and RTGS. Confidence follows habit: about three-quarters of respondents said they considered UPI safe, while trust in cards and mobile banking was also high. In that sense, digital payments have clearly won over consumers. The problem, the report suggests, is that confidence is rising faster than caution.
The unsettling finding is that the people most comfortable with online banking are often the same ones most exposed to risky behaviour. The report says respondents who were more willing to open links from unknown senders, share one-time passwords with strangers or accept unsolicited files were also more likely to describe digital payment systems as very safe. That pattern extended to victimisation as well. Those who said online banking was very safe were also more likely to report being targeted by cybercrime in the previous two to three years. In other words, trust and exposure appear to be moving together rather than in opposite directions.
The threat is also becoming more organised. A cybercrime specialist quoted in the report described a shadow market in which fraudsters buy ready-made kits containing pre-activated SIM cards, bank accounts and mobile phones. The Indian Cybercrime Coordination Centre has separately warned about illegal payment gateways built around mule accounts, saying transnational gangs use them to launder money and that some people are drawn into the schemes without fully understanding the criminal trail they are helping to build. That combination of prepacked tools and human manipulation has fuelled a wide range of scams, from fake investment apps to so-called digital arrest frauds, in which victims are isolated and pressured for days.
The broader trend is visible in official and media data as well. A report cited by PYMNTS said digital payment fraud in India rose 400% in the year to March 2024, even as UPI volumes surged. NDTV reported that cybercriminals stole ₹22,842 crore from Indians in 2024, almost three times the amount lost in 2023, while Business Standard said losses in the first nine months of 2024 had already reached ₹11,333 crore. The message across those numbers is consistent: as digital payments become the default way to move money, fraudsters are learning to exploit the trust that makes the system work. The challenge for India is no longer whether people will adopt digital payments, but whether the ecosystem can keep pace with the criminals who now treat that trust as an opportunity.
Disclaimer: This article is intended to inform and educate, not to recommend or endorse any financial product, investment or strategy. Please consider your own financial circumstances and seek professional advice where appropriate before making financial decisions.
