Bitcoin Forum

Local => Off-Topic (India) => Topic started by: mybitly on June 21, 2024, 01:32:41 PM



Title: How does UPI work?
Post by: mybitly on June 21, 2024, 01:32:41 PM
Hello Dear Community,

I’m looking to learn more about how UPI payments work and have some questions about user flows in certain situations.

Recently, I visited India and noticed that their payment system is very advanced compared to Western countries. They use a system called UPI (Unified Payments Interface).

Almost everyone uses mobile apps like PhonePe, GPay, and Paytm to make payments almost everywhere! There's no need to carry bank cards.

Here’s what I’ve learned so far:

How UPI Payments Work
Setup:

The user has a bank account and a mobile number.
They download a UPI app (e.g., PhonePe).
The user signs up using their mobile number and receives an OTP (One-Time Password) to verify it.
They link their mobile number to their bank account by entering basic bank details.
The app verifies this with another OTP sent by the bank to confirm the linkage.
Making a Payment:

The user opens the app and scans the recipient's QR code.
The app displays payment details.
The user confirms the payment, and within a second, both parties are notified of the transaction status.
My Question
If the mobile number linked to the UPI account is reassigned to a new user, can the new user access the previous owner’s bank account funds?

I’d appreciate any insights or additional information on this.

Thank you!


Title: Re: How does UPI work?
Post by: Bitcoin Smith on June 28, 2024, 11:50:12 AM
If the mobile number linked to the UPI account is reassigned to a new user, can the new user access the previous owner’s bank account funds?

I’d appreciate any insights or additional information on this.

Thank you!

Yes, and that is the method used by the scammers which is called swim swapping.

But it's highly unlikely to get access of someone's number because every number is linked with unique Aadhar number so one who wants to buy the number has to provide the KYC documents with liveness test but this can be passed easily if you have someone inside the service provider.