Cybersecurity Challenges in UPI and Digital Payments

UPI and digital payments have transformed financial transactions by providing fast and convenient payment services. However, increased adoption has also created cybersecurity challenges involving phishing, social engineering, QR-code fraud, malicious applications, SIM swapping, account takeover and information leakage. The reviewed literature and survey evidence show that both technical and behavioral factors contribute to digital-payment security. The RBI survey identifies vishing and phishing among important fraud or attempted-fraud methods, while the Local Circles survey highlights UPI fraud exposure and the problem of non-reporting. A recent academic study further indicates that users have varying levels of cybersecurity awareness and substantial exposure to suspicious UPI communications. The results should not be interpreted as a single combined statistical study because the evidence comes from different surveys and research populations. Instead, the studies collectively provide evidence that cybersecurity risk exists at several layers of the digital-payment ecosystem. Securing UPI therefore requires a layered approach involving strong authentication, transaction monitoring, intelligent fraud detection, user awareness, secure application practices and effective reporting mechanisms. Future research can further investigate behavioral fraud detection, privacy-preserving machine learning and methods for improving user responses to social-engineering attacks.

1.   National Payments Corporation of India (NPCI), UPI and digital-payment security information, official resources. 2.  Reserve Bank of India (RBI), publications and guidelines relating to digital payments, payment systems and customer protection. 3.    Ministry of Electronics and Information Technology (MeitY), Government of India, cybersecurity awareness resources. 4.    Reserve Bank of India, Annual Reports and payment-system information, relevant editions. 5.   Academic journal and conference literature on mobile-payment security, phishing, social engineering, fraud detection and cybersecurity awareness. 6.  Additional peer-reviewed sources identified during the literature-review stage.