一起印度总理抗疫基金善款诈骗案无意中暴露了数字印度的硬实力

2020年3月30日，德里警方发出警情通报，说是有人在网上传播一个假的UPI虚拟支付地址（fake UPI ID），骗取人民群众向印度总理莫迪发起的抗疫基金（PM Cares Fund）账户转移的捐款。

这个假UPI虚拟支付地址为pmcare@upi，它和总理抗疫基金的支付地址pmcares@sbi很相似。

警方已经查到这个骗子，他承认想借机发点国难财。警方希望人民群众擦亮眼睛，不要给假账号转钱。要转就转到pmcares@sbi。

这个总理抗疫基金全名叫总理公民紧急救助基金(PM’s Citizen Assistance and Relief in Emergency Situations (CARES) fund )。

假的UPI虚拟支付地址是被人在推特上向德里警方和印度国家银行举报的，银行立即转交给他们的UPI team，随后这个骗子账户就被block了。

很简单的案子，很难懂的内容。什么叫UPI？

让我们先从遥远的西天说起，这些年中国人依稀听说印度在执行一个神秘的计划——Digital India（数字印度），却不得其详。据说这个计划的宏伟目标可以用三个词来概括——Faceless（不见面）, Paperless（不用纸）, Cashless（不用钞票）。

为了追梦，印度阿三聚集了一批人才，瞒着中国，秘密研发出了一系列，炫目的，创新型，无现金数字支付模式。什么USSD（功能手机银行），AEPS（生物识别验证交易），UPI都是非常有印度特色的创意。这个UPI就是其中最亮的一个。

UPI全名叫UNIFIED PAYMENTS INTERFACE (UPI)（统一支付界面）。它是2016年印度中央银行印度储备银行下属的The National Payments Corporation of India (NPCI)推出的银行间实时支付系统。

有了它，收款人可以通过智能手机发起支付请求，无论交易双方是在哪个银行的开的户，通过virtual payment address（虚拟支付地址）作为payment identifier （支付识别代码），就可以进行收款付款。用户只需进行2-factor authentication双因子验证授权即可实时完成交易。

结构原理

手机安装开户程序

To initiate a transaction, you can use two types of address—global or local. Global address includes your mobile, Aadhaar and bank account numbers. A local address can be a virtual address. Let’s say your bank gives you a virtual ID similar to your email ID (for instance, name@companyname). This virtual address will allow you to send and receive money from multiple banks and prepaid payment issuers.

So, you will no longer need to use a particular app to send and receive money. 

使用方法举例说明

使用UPI打的付款

For example, if you use a taxi service, at the end of the journey you just have to give your virtual address and the driver will request money from it. You will get a message on your mobile phone asking for authentication. Once you authenticate the transaction by entering your password, it will be complete. This process doesn’t require either the driver or you to share bank details. Since UPI runs on IMPS, the service will be available real time and 24X7.

使用UPI购物支付

Step-1 – After buying something online and reaching the payment gateway to select a payment mode.

Step-2 – Here, you or merchant banker selects UPI and enter your virtual address as the identifier (e.g. sureshkp@icicibank). Immediately, a notification is received on your smart phone application for the service to which the particular virtual address is linked like your bank account, or Paytm, or other payment wallets.

Step-3 – When this notification is opened, it asks for a security pin called MPIN. On entering the MPIN, your transaction is completed within seconds. Under this system, the user will have multiple virtual addresses for different bank accounts in various banks. It enables you to purchase anything without sharing your account details, credit or debit card details. 

An MPIN is given to a banking customer once they register for Mobile Banking support. Chances are you have one already, but have never used it.

You will get an SMS on your registered mobile number on successful completion of the UPI transaction.