Home Tools Scam or Legit?
Interactive game

Scam or Legit? Can You Spot India's Payment Scams?

Ten real situations. Four minutes. Most people lose money. This game is deliberately hard — because the best scams are.

₹1,00,000

Your starting balance

Think you can't be scammed?

You'll see 10 real payment situations — SMS, WhatsApp, UPI screens, phone calls. Tap SCAM or LEGIT. Get it wrong and it costs you. Some genuine messages look suspicious; calling them a scam costs you too.

India's payment-fraud landscape — why this game is hard on purpose

UPI made India the world leader in real-time payments — and the world's richest target for payment fraud. As digital payments exploded, so did the scams riding on them: fake KYC links, UPI collect-request traps, QR-code reversals, screen-share remote-access attacks, fake customs and "digital arrest" calls, and investment groups promising guaranteed returns.

The uncomfortable truth this game is built around: falling for a scam has almost nothing to do with intelligence. Scams work by hijacking emotion — urgency, fear, authority, greed — faster than your rational brain can engage. That's why the timer in this game speeds up on the harder rounds. The rush you feel is exactly the weapon. Recognising the manipulation pattern, not just the specific scam, is what actually protects you.

Every scenario here mirrors a real fraud pattern seen in India — and crucially, some are genuine messages that merely look suspicious, because over-suspicion has its own cost. The goal isn't a high score. It's the moment a real version lands in your inbox and you pause, because you've seen the shape of it before.

If you've lost money to a scam: call the national cybercrime helpline 1930 immediately (the first hours matter most for freezing funds) and file at cybercrime.gov.in. Scenarios here are illustrative and for education. Numbers and details are being independently verified before launch.

FAQ

What are the most common UPI scams in India?The frequent ones: UPI collect-request traps (a "buyer" sends a request that debits you), fake KYC / bank SMS phishing links, QR-code "receive money" reversals, fake customer-care numbers found via search, screen-share remote-access apps, and OTP social engineering. Most share one DNA: manufactured urgency that makes you act before you think.Can you get scammed by scanning a QR code?Yes — but only in one direction. Scanning a UPI QR and entering your PIN always SENDS money; it can never make you receive money. The common scam is a "buyer" who asks you to scan their QR to "receive" a payment. If anyone asks you to scan to get paid, it's a scam.What is the digital arrest scam?Fraudsters impersonate police, CBI, customs or courier officials and claim your identity or a parcel is linked to a crime. They keep you on a continuous video or phone call, isolate you from family, and pressure you to transfer money to "avoid arrest". No real agency arrests people over a call or collects fines this way — it is always a scam.What should I do if I've been scammed?Act in the first hour — that's when funds can still be frozen. Call the cybercrime helpline 1930, report at cybercrime.gov.in, and inform your bank to flag the transaction and beneficiary account. Save all messages, numbers and screenshots as evidence. Speed matters more than anything else.Why does the game penalise calling a genuine message a scam?Because real-world over-suspicion has a cost too — blocking your own legitimate payments, distrusting valid bank alerts, missing real opportunities. The skill isn't shouting "scam" at everything; it's reading the specific tells. The game rewards accuracy in both directions.