Phishing & UPI Scam Protection on Your PC | PremiumAV

An urgent invoice, a delivery message or a request from someone claiming to be your bank can reach you while you work on a PC. The attack may end on your phone, through a payment request or a remote-access session. The safest routine connects these steps: verify the request, protect the account and check what action the payment screen actually authorises.

This guide is for home users and small offices in India. It explains practical habits around messages, browsers and payment requests. It does not promise that antivirus software can identify every scam. Many scams depend on persuading a person to approve an action that their device is technically allowed to perform.

Pause before following an urgent request

Pressure is a useful warning sign. Be cautious when a message says your account will close, a parcel will be returned or a supplier must be paid immediately through a new route. Pause even if the message includes your name, an order number or a familiar logo. Those details may be available from earlier correspondence or another source.

Check the request through a channel you already trust. Call a supplier using the number in your existing records, or open a service through a saved bookmark. Do not use the callback number provided in the suspicious message as your only verification. In an office, a change of bank details should follow the normal approval process even when it appears to come from a senior colleague.

Open the real site deliberately

For banking and other sensitive accounts, type the known address or use a bookmark you previously checked. Search advertisements and copied logos can lead to convincing imitation pages. Read the domain carefully before entering a password. A padlock indicates an encrypted connection; it does not establish that the business behind a page is honest.

Avoid signing in through links in unexpected attachments, QR codes or chat messages. If you are unsure of the address, use an established app or official paperwork to find it. Do not download a banking helper, certificate installer or security update from a message. Obtain browser and operating-system updates through their normal built-in update mechanisms.

Review a payment request on its own terms

Read the payment screen before approving anything. A message saying you will receive a refund does not change what a request in your payment app authorises. A UPI PIN is used to authorise transactions such as sending money; do not enter it because a caller claims that is necessary simply to receive money. Check the displayed action, amount and payee.

Never share a UPI PIN, card PIN, password or one-time password with someone claiming to be support. Do not approve a collect request or scan a QR code merely because a stranger says it will credit your account. If the flow is confusing, stop and contact your bank or payment provider through its official help channel. A genuine pending issue can be checked without continuing a pressured call.

Keep remote access away from payments

A scammer may ask you to install a remote support tool on the PC and then open your banking or payment account. This can expose what you type and let the other person control actions. Do not grant remote access to an unsolicited caller. A familiar application name does not make an unexpected support request legitimate.

When legitimate technical support is needed, arrange it through a verified channel and close sensitive applications first. Stay present, understand the work and end the session afterwards. Do not log in to banking while another person controls the device. If you already granted access to a suspicious person, disconnect the session and network, then seek help from a trusted technician and your financial provider using another trusted device.

Treat attachments as separate decisions

An invoice can be both familiar-looking and unsafe. Check whether you expected it, whether the sender address matches the established contact and whether the requested payment differs from the normal arrangement. An address with a similar spelling is not the same address. A genuine account can also be compromised, so sender recognition is only one check.

Do not enable macros or run a program to view an unexpected document. Be cautious with password-protected archives and files that use a document icon but have a program or shortcut extension. Show file extensions in File Explorer and scan downloaded files using your active antivirus. Our USB safety guide covers similar file checks when an invoice arrives on removable media.

Strengthen the accounts behind the browser

Use a different password for each important account and a reputable password manager if that fits your needs. Enable multi-factor authentication using the options provided by the service. Keep recovery details current and protect the email account used to reset other passwords. Do not approve an unexpected sign-in notification just to make it stop appearing.

Review signed-in devices and sessions after a suspicious event. If you need to change a password, use another trusted device when the PC may be compromised. Merely clearing browser history does not revoke an attacker's active session. Follow the service's account recovery instructions and ask an office administrator to review work accounts, mail rules and shared access where relevant.

Set a small-office payment rule

Agree that new payees and changed bank details require independent verification. A second person should check unusual payments where staffing permits. Keep the supplier's verified contact information outside the incoming message so the same fraudulent message cannot supply both the request and its supposed verification.

Make it easy for staff to report a mistake quickly. Record the time, payment reference, sender details and what was clicked or installed. Do not circulate a suspicious attachment to every colleague as a warning. Share a description or a safe screenshot instead, and let the responsible person preserve the original evidence. The small business security guide covers the broader daily routine.

If you have already acted

Contact your bank or payment provider immediately through an official channel if you sent money or exposed financial details. In India, the national cybercrime reporting helpline is 1930 and the official reporting portal is cybercrime.gov.in. Use a trusted device to reach official services. Preserve transaction references and relevant messages, and follow the instructions given for your case. Reporting quickly does not guarantee recovery.

If software was installed or credentials were entered on a suspicious page, secure the affected accounts and arrange a PC check. See how to check a PC for virus signs and the malware removal guide. Use the official download page for PremiumAV files and pricing page for licence options. Protection software supports the routine, while verification and careful approval remain essential.

Official references

NPCI fraud awareness · National cybercrime reporting · Government helpline information