OTP, UPI and Account Safety: 8 Rules for Real-Money Gaming Apps

On this page

1. Rule 1: Nobody needs your OTP
2. Rule 2: You never enter a UPI PIN to receive money
3. Rule 3: Do not search for a support number
4. Rule 4: Never install a screen-sharing app for “support”
5. Rule 5: Install only from the operator’s own site
6. Rule 6: Check the address before you log in
7. Rule 7: No agent can double your money
8. Rule 8: Test small before you trust big
9. The scams in one table
10. If it has already happened
11. One last safeguard
12. Frequently asked questions

Most people who lose money around gaming apps do not lose it to the games. They lose it to someone pretending to be support, a refund agent or a helpful stranger. The tricks are few and they repeat. Learn these eight rules and you will recognise nearly all of them.

Rule 1: Nobody needs your OTP

An OTP exists so that only the person holding your phone can approve something. No support agent, bank officer or “verification team” ever needs you to read it out. Anyone who asks is trying to log in as you or approve a payment from your account.

Rule 2: You never enter a UPI PIN to receive money

This is the most important fact about UPI. Your PIN is only ever needed to send money. If someone says they are refunding you or paying out winnings and a request appears asking for your PIN, approving it sends your money to them. Decline it.

Rule 3: Do not search for a support number

Fraudsters post fake “customer care” numbers on search results, maps listings and social media. Reach support only from inside the app or site, or through the channels the platform itself links to. Genuine support does not ask you to call a mobile number found online.

Rule 4: Never install a screen-sharing app for “support”

If someone asks you to install a remote-access or screen-sharing app so they can “fix your withdrawal”, end the call. With your screen in view they can read your OTPs and watch you type your PIN.

Rule 5: Install only from the operator’s own site

“Mod”, “hack”, “unlimited coins” and “predictor” versions do not change the games. They are built to steal logins. Our guide to installing an APK safely shows what a clean install looks like.

Rule 6: Check the address before you log in

Look-alike sites copy a platform’s design and change one letter in the address. Type the address yourself or use a saved bookmark, and be wary of links in messages. For the record: this site is an unofficial guide, not GoPlay11, and it never asks for your login.

Rule 7: No agent can double your money

Offers of guaranteed wins, insider signals, “account upgrades” or deposits handled by an agent on Telegram or WhatsApp are all the same scam. Deposits go through the payment page inside the app — never to a person.

Rule 8: Test small before you trust big

On any platform, make the minimum deposit, play a little and withdraw. Only when money has returned to your own account should you consider depositing more. Our seven checks before you deposit go through the rest.

The scams in one table

What they say	What is really happening	What to do
“Tell me the OTP to verify your account”	They are logging in as you	Hang up
“Approve the request to receive your refund”	A UPI collect request — you are paying them	Decline
“Install this app so I can help”	Remote access to your phone	Refuse and block
“Pay a fee to release your withdrawal”	An advance-fee scam	Do not pay
“Use this special APK for bonus”	Malware	Do not install

If it has already happened

1. Call your bank immediately and ask them to block the transaction, the card or UPI.
2. Call 1930, the national cyber crime helpline, or report at cybercrime.gov.in. Speed matters: the sooner a report is made, the better the chance of stopping the money.
3. Change your passwords and UPI PIN, starting with e-mail and banking.
4. Uninstall any app you were told to install, and tell the platform’s support through its official channel.

One last safeguard

Keeping your account safe is half of playing safely. The other half is keeping your spending within limits you chose in advance — see play responsibly.

Frequently asked questions