Frozen Screen, Empty Account? How Cybercriminals are Targeting UPI Users

A frozen phone screen can become the starting point for UPI fraud when scammers use fake support calls, malicious apps and stolen permissions to access sensitive banking information.
Frozen-Screen UPI Scam_ How A Technical 'Glitch' Can Drain Your Bank Account.
Written By:
Poulami Saha
Published on
Updated on

Did your phone suddenly freeze after clicking an unfamiliar link or social media advertisement? This might look like a routine technical issue. But cybercriminals are using such incidents to create panic, gain access to devices, and target banking information.

Decoding Frozen-Screen Scam

The fraud starts after users click on an ad, a message, or an unknown link. The phone might display an error or freeze after the click. This might not be the core fraud mechanism. However, freezing could help the criminal create a hidden window for their activities.

Next, the criminals could impersonate customer support agents or technologists. These agents might inform them that their mobile phone, bank app, or UPI account is compromised and needs fixing. Then, the victims could be asked to download an APK file. This comes disguised as a file for verification or rewards.

According to Harish Kumar, CEO, Quick Heal Technologies, “ The frozen screen is often not the real event, but the distraction.  Scammers may use fake error messages, advertisements, or calls posing as customer support representatives to convince victims that there is a problem with their phone, banking application, or UPI account. Victims may then be persuaded to download an APK disguised as a reward, cashback, verification, or service application.”   

Malicious Apps Expose Sensitive Data

UPI transactions require user authorisation. NPCI further explained, “ The UPI PIN is used to authorise bank transactions and should never be shared with anyone. It also says a bank's customer support will not ask for the UPI PIN.”

This means scammers can exploit the user's device or behaviour rather than directly bypassing UPI security. If you are manipulated into approving a transaction, the payment can appear technically authorised.

If the phone freezes after clicking a suspicious link, users should avoid entering banking credentials or UPI PINs. They should disconnect the device from the internet if compromise is suspected and avoid installing applications recommended by unsolicited callers.

Also Read: Cybersecurity GRC Frameworks: A Complete Guide for Businesses

Join our WhatsApp Channel to get the latest news, exclusives and videos on WhatsApp
logo
Artificial Intelligence News & Cryptocurrency News: Latest Trends | Analytics Insight
www.analyticsinsight.net