How to Create a UPI ID: A Simple, Safe Guide

A UPI ID is one of the most useful things you can set up on a smartphone. Instead of sharing your account number, IFSC and branch every time someone wants to pay you, you share a short handle like yourname@bank, and money arrives in your account. Creating one is quick and free, and if you follow a few safety habits from the start, it stays that way.

This guide shows how to create a UPI ID step by step on the popular apps — PhonePe, Google Pay, Paytm and BHIM — how to link your bank account, how to set your UPI PIN correctly, and how to sidestep the scams that target people during setup.

Before you start: what you need

• A smartphone with internet.
• A bank account that supports UPI (nearly all do).
• The mobile number registered with that bank account, active in the phone you are using — the app sends a verification SMS from it.
• Your debit card for that account (or, in some banks, an Aadhaar-based option) to set the UPI PIN.

The registered-mobile-number requirement is the part people miss. UPI proves you own the account by sending a silent verification SMS from your phone. If the number in your phone is not the one linked to your bank, setup will fail. If your number has changed, update it with your bank first.

Step 1 — Install an official UPI app

Download the app only from your phone’s official app store, and check the publisher name. Popular choices include PhonePe, Google Pay, Paytm, BHIM and most banks’ own apps — they all use the same underlying UPI system, so the money experience is similar. Never install a UPI app from a link someone sends you on WhatsApp or SMS; that is a common way fake apps spread.

Step 2 — Register with your bank-linked mobile number

Open the app and register using the mobile number that is linked to your bank account. The app sends a verification SMS to confirm the number. You may be asked to set an app lock (a screen lock or app PIN) — this is a lock for the app itself and is not the same as your UPI PIN. Keep the two clearly separate in your mind.

Step 3 — Let the app find your bank account

Choose “Add bank account” and pick your bank from the list. The app uses your verified mobile number to fetch the accounts linked to it and shows them (often with the last few digits masked). Select the account you want to use. If nothing shows up, the usual cause is a mobile-number mismatch — the number in the phone is not the one registered with that bank.

Step 4 — Set your UPI PIN

This is the most important security step. To create your UPI PIN, the app asks for the last six digits and expiry of your debit card (or, for some banks, an Aadhaar-based OTP route). You then choose a 4 or 6-digit UPI PIN. A few rules:

• Enter debit card details only inside the official app, never on a website or to a person on a call.
• Choose a PIN that is not your birth year or something obvious, and do not write it on the phone.
• Never share your UPI PIN with anyone — not the app, not a “support agent”, not a relative setting it up for you over the phone.

Step 5 — Your UPI ID is created

Once the account is added and the PIN is set, the app generates your UPI ID (VPA) — the handle like yourname@bank. You can usually view it under your profile or payment settings, and often customise part of it. This ID is safe to share so people can pay you.

Here is the mental model to lock in from day one:

App screens and options vary and change over time, as of 2026 — follow the prompts in your own app.

The golden rule: PIN is for paying, never for receiving

The single most common UPI scam works by convincing you to enter your UPI PIN to “receive” money — a prize, a refund, a payment for something you are selling. It never works in your favour, because entering your PIN authorises money to leave your account, not to arrive. If anyone ever asks you to enter your PIN or approve a “collect request” to get money, stop. Read why you never enter a UPI PIN to receive money once, carefully, and you will be immune to a whole family of frauds.

Scams to avoid during and after setup

• Fake “help” calls. No bank or app calls you to “complete UPI setup” and asks for card details or OTP. Anyone who does is a fraudster — never share an OTP with anyone.
• Fake apps and links. Install only from the official store. Links promising “instant UPI activation” often install malware.
• “Reward” QR codes. Scanning a QR code is for paying. You do not scan a QR or enter a PIN to receive a reward.
• Screen-sharing requests. Never install screen-sharing apps at a caller’s request; they can watch you type your PIN.

For a fuller routine, keep our 10 UPI safety rules handy, especially when helping an older relative set up their first UPI ID.

Managing more than one account

Most apps let you link several bank accounts and even create multiple UPI IDs. If you do, set a clear default account for payments and remember which UPI ID points where, so incoming money lands in the account you expect. You can change the default in the app’s account settings at any time.

If something goes wrong

If setup keeps failing, the usual culprits are a mobile-number mismatch or a temporary bank issue; try again after confirming your registered number. If a payment later goes to the wrong UPI ID, or you suspect fraud, see how to dispute a wrong or fraudulent UPI transaction and act quickly.

A note on trust

This is general information to help you set up UPI safely, not financial advice. App screens, options and limits change over time, so follow the prompts inside your official app and confirm anything unclear with your bank. Never enter your debit card details on a website, and never share your UPI PIN or OTP with anyone — CyberKannadig collects none of these, and every step here is done by you, inside the official app.