Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Clear out junk files and repair common Windows errors3Fix the driver behind crashes, sound loss and screen glitchesTo avoid UPI scams, keep your UPI PIN and OTP private, and read the payment screen before approving anything. A UPI PIN authorizes a transaction; entering it does not help you receive money. Check the payee and amount, reject requests you do not recognize, and report suspected fraud promptly through your bank or UPI app and India’s official cybercrime channels.
Know what a UPI PIN authorizes
Your UPI PIN is used to authorize a transaction. Never tell it to another person: the National Payments Corporation of India (NPCI) says bank customer support will never ask for it. Treat OTPs as private account-security information too, and do not share them or approve a prompt because someone on a call or in a message tells you to.
As an Amazon Associate I earn from qualifying purchases.
Receiving money does not require scanning a QR code and entering your UPI PIN. NPCI warns that scanning a QR code and entering a PIN is part of making a payment. Before entering your PIN, read the action shown in the app and confirm the payee and amount. If a caller or message says a PIN is needed to receive a payment, refund, cashback, or prize, stop and verify the claim independently.
Check QR codes, links, and requests before acting
QR codes and cashback offers
Be wary of a QR code or link sent with instructions to claim cashback, a prize, or money owed to you. A scan alone is not the authorization step described by NPCI; the important check is the payment prompt that follows. Do not enter your PIN unless you intend to pay the displayed recipient and amount.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Collect requests and urgent claims
A collect request is a request for you to authorize a payment, not proof that money is being sent to you. The Reserve Bank of India (RBI) advises users to review the merchant’s or person’s collect request and reconfirm the recipient and amount. If the request is unsolicited or you do not recognize its purpose, reject it. Verify claims about refunds, prizes, account blocks, or urgent assistance through a channel you find independently, not contact details or links supplied by the sender.
Unknown apps and suspicious help
Use the official payment app and keep it updated. Protect your phone and app with a strong passcode, and do not install an unfamiliar app because a caller or message claims it will fix a payment problem. NPCI flags unknown-app downloads as a fraud pattern; a request to install remote-access software is one practical warning sign.
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Opening an app does not approve a payment
In a clarification dated 13 January 2025, NPCI addressed claims about a “jumped deposit” scam: merely opening a UPI or bank app does not automatically approve a payment. According to NPCI, the user must navigate to the request, explicitly select Pay, and authorize the payment with a UPI PIN. That clarification explains the approval mechanics; it is not a reason to ignore an unfamiliar request or other suspicious activity.
Quick Recap
Best Value
- FIDO2 & Passkey Ready: Business-ready and FIDO2 L1 certified. This key is supported by major management suites and is ideal for both individual and enterprise deployment. Works seamlessly with Gmail, Facebook, GitHub, Dropbox, Coinbase, and more.
- Universal Connectivity (USB-A ): Features a built-in USB-A connector—simply unfold the key and plug it into your compatible PC or laptop for seamless authentication on the go.
- Dedicated Manager App: Use the Thetis Manager App for the initial hardware PIN setup. Setting the PIN on the device first ensures a smooth registration process. Once the PIN is configured, you can begin registering the key across your favorite FIDO2-compatible online services.
- Ultra-Durable & Portable: Featuring a rotating metal cover, this key is water, crush, and tamper-resistant. It fits easily on a keychain and requires no batteries or network connectivity.
- Check FIDO2 compatibility before purchase - Known limitations: ID Austria is not supported (requires FIDO2 Level 2). Windows Hello login only works with Windows Enterprise editions that support Entra ID, and NFC is NOT supported.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
What to do if money is deducted or a transaction looks suspicious
- Report it through the app and your bank. Open the transaction in your UPI app’s history and use its complaint or issue-reporting option; contact your bank as well. NPCI says users can raise or check a grievance through the participating UPI app, and BHIM describes reporting an issue from transaction history.
- Report cyber financial fraud immediately. Call India’s 1930 helpline and file a report through the National Cyber Crime Reporting Portal. The portal identifies 1930 for immediate reporting of cyber financial fraud.
- Keep useful details. Save the transaction reference, amount, time, payee information, relevant messages and phone numbers, and screenshots. These can help when you explain the issue to your bank or submit a report.
- Secure your account and device. Follow your bank’s instructions. Stop communicating with the suspected scammer and do not install software they recommend.
- Check pending or failed transactions through official channels. Review the status in your app or bank account and raise a complaint if needed. NPCI’s FAQ describes reversals for declined transactions and advises contacting bank support when a reversal is delayed; handling details can change, so check the current guidance in your app or with your bank.
A quick check before you approve
- Am I being asked to pay, or am I being told I will receive money?
- Do I recognize the payee or requester, and do I understand why they are asking?
- Does the screen show the correct recipient and amount?
- Am I entering my PIN because I chose to make this payment, rather than because someone instructed me to?
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
