The "Receive" Button Trap

I listed my old sofa on a marketplace app in Hyderabad. Within minutes, a buyer messaged, eager and skipping the haggling. "I’m sending the full amount now via UPI," he said. "Just scan this QR code to receive the payment." He sent a screenshot of a QR code over WhatsApp. I scanned it, and my UPI app opened instantly. But instead of a "Deposit" confirmation, the screen asked for my UPI PIN to authorize a payment of ₹15,000 to him. "Why do I need my PIN to get money?" I asked. "It’s a new security feature for business accounts," he replied smoothly. "Do it quickly before the link expires." I paused. I remembered the golden rule: You never, ever need to enter your PIN to receive money. I blocked him. Two minutes later, the "buyer" vanished, and the profile was deleted. In the world of digital payments, a single click can turn a sale into a heist.