UPI ID: Your old UPI ID will empty your account, change this setting immediately
3 min read
“Your old UPI ID can become a silent thief if you delete the app but forget to deactivate the ID – a risk that’s turning everyday payments into a security gamble across India.”
Why an “inactive” UPI ID still matters
I’ve seen countless friends hop from Paytm to PhonePe, from Google Pay to BHIM, and never look back. The switch feels effortless because creating a fresh UPI ID is a few taps away. What most people don’t realise is that the old ID keeps humming in the background, ready to hand over funds the moment the linked mobile number changes hands.
Deleting the app ≠ deleting the ID
When you uninstall a payment app you only erase its icon. The UPI address, the linked bank accounts and any standing mandates remain live inside the UPI network operated by NPCI. Unless you explicitly revoke the ID from within the app (or via your bank), it stays fully functional.
How an old UPI ID can drain your account
Scenario: You delete Google Pay, keep the ID rahul123@okicici tied to the number 98765‑43210. Six months later your telecom provider recycles the number. The new subscriber receives OTPs meant for your UPI transactions. A fraudster, armed with the recycled number, initiates a SIM‑swap, resets your UPI PIN, and siphons money out of your account.
What happens when you delete vs. deactivate
| Action | Effect on UPI ID | Risk Level |
|---|---|---|
| Uninstall app only | ID stays active, all links intact | High |
| Deactivate ID in app | ID removed from UPI network | Low |
| Contact bank to close ID | ID permanently archived | Very Low |
How to protect yourself today
- Audit your IDs. Visit NPCI’s UPI ID lookup or open the “UPI” section of your primary bank app to see every ID attached to your mobile number.
- Unlink old accounts. For every dormant app, go to Settings → ‘Linked bank accounts’ and delete the association.
- Revoke standing mandates. Auto‑pay for utilities, subscriptions or loan EMIs that still point to a dead ID should be cancelled from your bank’s “Auto‑pay” dashboard.
- Deactivate the ID. Use the app’s “Close UPI ID” feature or ask your bank’s branch manager to delete it from the NPCI ledger.
- Secure your SIM. Enable your carrier’s “SIM‑lock” and set a unique PIN. If you change numbers, update the new mobile number with every bank that supports UPI.
Did you know?
Over 65 % of UPI fraud cases in 2023 involved SIM‑swap attacks on recycled numbers (source: RBI Annual Report 2023‑24).
Quick tip
Set a unique 6‑digit UPI PIN that you never reuse for mobile or ATM PINs.
Stat check
More than 1.1 billion UPI transactions happen daily; a single dormant ID can expose up to ₹200,000 in unchecked withdrawals.
Bottom line
Treat a UPI ID the way you treat a bank‑card number – you wouldn’t toss a credit card in the trash without cutting it, right? A quick audit, a few taps, and a call to your bank can turn an invisible vulnerability into a non‑issue. After all, in a payment ecosystem that moves faster than a Mumbai local train, a little housekeeping goes a long way.
