1. UPI PIN and OTP solve different problems
A UPI PIN is a reusable secret set for a bank account in the UPI ecosystem and used to authorize supported UPI debits. An OTP is a one-time code generated for a particular authentication step and expires quickly. Both are security credentials, but they are not interchangeable. A legitimate support agent should not need you to tell them either credential over a call or chat.
2. Entering a PIN usually means money may leave
If someone says, “Enter your UPI PIN to receive a refund,” treat that as a warning sign. In a normal receive-money scenario, you do not need to tell another person your PIN. A collect request can look like money is coming to you, but approving it with your UPI PIN can authorize money to go out. Always read the direction and amount on the confirmation screen.
3. OTPs should also stay private
OTPs may be used by banks or card systems for device registration, account verification or selected transactions. Because an OTP is short-lived, scammers often create urgency so you reveal it before it expires. Do not share an OTP with a person claiming to be from the bank, UPI app, courier, merchant or police. Complete sensitive actions only inside the official app or website you opened yourself.
4. Separate credentials from conversations
Treat PINs, OTPs, card CVV and passwords as things you enter only into trusted interfaces - not information you read out to people. If a support call requires you to disclose a secret verbally, stop and use the official bank or app support channel instead.
5. Quick check
A caller says they are sending you ₹5,000 and asks you to approve a request with your UPI PIN. What should you assume?