Verify Bank Account Without Asking for Bank Details

Ask a customer for their account number and IFSC code and watch what happens. They open their banking app to find it. They scroll through a passbook photo. They copy a 16-digit number by hand and get one digit wrong. Or they close your app and plan to come back later, which usually means never.

The bank details form is often where onboarding sees the most drop-offs, simply because customers may not have their account number and IFSC readily available when they reach this step. Yet it is also the step that determines where you can safely send their money.

Lenders need it before disbursal. Marketplaces and gig platforms need it before the first payout. Insurers need it before a claim. Broking and wealth apps need it before the first withdrawal.

Most businesses need to verify the bank account before they can move money. But does that verification always need to start by asking the customer for their account number and IFSC?

Reverse Penny Drop and UPI Penny Drop offer a different way to verify account ownership through UPI, without making the customer manually enter their bank details. The customer does less, while the business gets stronger proof that the account actually belongs to them.

What Are Reverse Penny Drop and UPI Penny Drop?

Reverse Penny Drop is a bank account verification where the customer pays ₹1 to the business from their own account using a supported UPI app. The payment travels through the UPI network, so the account used to pay is the account that gets verified. The business receives the account number, IFSC and UPI ID behind the payment, and the ₹1 is refunded automatically.

UPI Penny Drop is the forward direction over UPI. With the customer’s consent, the business sends ₹1 to the customer’s UPI ID and receives back the name registered at the bank, the underlying account number and IFSC, a transaction reference and a name match score. The customer only shares a UPI ID, which is generally easier to locate than an account number and IFSC.

The two approaches solve the same problem from different starting points:

• Reverse Penny Drop lets the customer prove which account they control.
• UPI Penny Drop lets the business verify the account behind a UPI ID.

Why the bank details form hurts conversion

A classic penny drop still depends on what the customer types. Four things go wrong on that screen, and all of them cost you a customer or a payout.

• They do not know the IFSC. Most people have never needed it. Finding it means leaving your flow.
• They mistype the account number. One wrong digit can fail the check, create a retry or point to the wrong valid account if the mismatch is not caught.
• They enter a closed or dormant account. The problem may surface only when verification or payout is attempted, after the customer has moved on.
• They give up. A form with two unfamiliar fields is a natural exit point, especially on mobile and especially for a first time user who has not yet seen any value from you.

Every one of those outcomes is a drop in conversion, a failed payout, or a manual fix. None of them is the customer’s fault. The form asked for information they were never going to have at hand.

What the customer actually does

With Reverse Penny Drop, the whole experience is one familiar action.

1. They tap Verify with UPI in your flow. No fields to fill.
2. They choose how to pay. Cashfree Secure ID returns TPAP-specific deep links for supported UPI apps, along with an intent link that opens the customer’s default UPI app on Android. A QR code is also available for desktop or assisted flows. The links stay valid for 10 minutes.
3. They approve a ₹1 payment with their UPI PIN. This is the same action they take to pay for groceries.
4. Verification completes as soon as the payment succeeds. Your system receives the account number, IFSC and UPI ID, and the customer moves on.
5. Once verification is complete, the ₹1 is automatically refunded to their account.

The customer never sees an IFSC field. They never type an account number. They cannot mistype anything, because they typed nothing.

With UPI Penny Drop, there is even less for the customer to do after consent. They share a UPI ID, or you use one you already hold with permission. Cashfree sends ₹1 to it and returns the registered name, account number, IFSC and a name match score against the name you supplied. This suits flows where the customer is not in a live session, such as bulk vendor onboarding, seller payouts or gig platforms adding thousands of payees.

How This Can Improve Onboarding Conversion

Three things change when the form disappears.

Fewer steps, familiar steps. A UPI PIN entry is something every UPI user has done hundreds of times. It carries none of the hesitation of a form that asks for details they would need to look up.

Instant certainty. The customer sees a confirmation in the same session. There is no waiting for a penny to land, no email two days later saying the account could not be verified.

Fewer failures downstream. Because the account details come from the rail itself, there are no manually entered typos to catch and fewer account-detail issues to discover at payout time. The payouts team starts with an account verified at onboarding.

For your funnel, that can mean more customers reach the end of onboarding and more of them receive their first payout on time, which is the moment trust is actually built.

Also Read: How a digital lender used Reverse Penny Drop to secure disbursals

How Reverse Penny Drop Strengthens Fraud Prevention

A bank details form proves nothing about ownership. The customer could type any valid account number: a relative’s, a friend’s, or one supplied by a recruiter who is paying them to lend their identity. Name matching on a cheque image or statement helps a little, but those are documents, and documents can be edited.

Reverse Penny Drop turns ownership into something the customer has to demonstrate. To complete it, someone controlling the UPI app and PIN for that account must approve the payment. A mistyped account cannot pass because nothing was typed, while an unauthorised borrowed account becomes harder to add without the account holder’s participation. However, ownership verification alone cannot determine whether a willing account holder has fraudulent intent.

It also leaves a record. Every verification carries a UPI transaction reference that creates an audit trail for the account-verification event at a point in time.

The Bengaluru trading scam linked to 507 suspected mule accounts in September 2026 shows why ownership must be read alongside intent. Reverse Penny Drop can confirm control of an account, but a broader risk layer is still needed to identify account holders who knowingly participate in mule activity.

Also Read: Common digital payment fraud risks businesses should monitor

Which one should you use?

The honest answer is both, in different places.

Situation	Use	Why
Customer is live on their phone during onboarding	Reverse Penny Drop	Direct control check; they pay from the account they will use
You already have a UPI ID and need to verify fast	UPI Penny Drop	No live payment action after consent; returns account details
Bulk vendor or seller onboarding	UPI Penny Drop	Scales without a session per payee
High value first payout or a changed bank account	Reverse Penny Drop	Re-proves control at the moment risk is highest
Customer gave account number and IFSC only	Standard penny drop with name match	Confirms account status and checks the name on the account

A good rule: The larger the payout and the fresher the account, the more you want the customer to prove ownership rather than claim it.

How Cashfree Secure ID builds this

We built both checks so the customer does the least possible work and your team gets the most possible certainty.

• One Reverse Penny Drop API call creates a request and returns everything the front end needs: app-specific deep links, a UPI intent link and a QR code, valid for 10 minutes.
• Verification resolves the moment the ₹1 lands. A details call returns the account number, IFSC and UPI ID, ready to store against the customer.
• The ₹1 is refunded to the customer automatically within 48 hours, so nothing is left for your support team to explain.
• The UPI Penny Drop API takes a UPI ID and an optional name, and returns the registered name, account number, IFSC, the transaction reference and a name match score, so bulk flows can verify the destination without a live payment action from the customer.
• Both sit inside the same Secure ID stack as Phone Risk Intelligence, document and face checks and Mule Sentinel, so account ownership becomes one layer in a wider assessment of the applicant.

Where account ownership fits in the identity risk stack

Account ownership is the last check before money moves, which makes it the one with the most direct financial consequence. Phone risk signals help assess the number collected first. Document and face checks help confirm the person. Ownership through UPI confirms the destination. And a mule score reads behaviour across these layers to help determine whether the applicant needs approval, step-up verification or review. Businesses can combine these checks within a digital onboarding flow and test relevant APIs in Cashfree Dev Studio.

Identity tells you who they are. Ownership tells you where the money can go. The strongest flows make sure both answers point at the same person, and they do it without asking the customer for an IFSC.

FAQs

What is Reverse Penny Drop?

A bank account verification where the customer pays ₹1 to the business from their own account through a supported UPI app. The account that made the payment is the account that gets verified, and the business receives its account number, IFSC and UPI ID. The ₹1 is refunded automatically.

What is UPI Penny Drop?

A verification where the business sends ₹1 to a customer’s UPI ID and receives the name registered at the bank, the underlying account number and IFSC, a transaction reference and a name match score. The customer only needs to share a UPI ID.

How is Reverse Penny Drop different from a regular penny drop?

In a regular penny drop the customer types an account number and IFSC and the business sends ₹1 to it. In Reverse Penny Drop the customer pays ₹1 from their account through UPI, so nothing is typed and the verified account is the one they actually control.

Does the customer need to know their IFSC or account number?

No. With Reverse Penny Drop they only pick a UPI app and approve a ₹1 payment with their PIN. With UPI Penny Drop they only share a UPI ID. The account number and IFSC are returned by the rail.

How long does the Reverse Penny Drop take?

The payment link is valid for 10 minutes and verification completes as soon as the ₹1 UPI payment succeeds, usually within the same session. The refund reaches the customer automatically within 48 hours.

How can Reverse Penny Drop reduce fraud risk?

Completing it requires someone with control of the UPI app and account PIN to approve the payment. This prevents manual account-number errors and makes unauthorised borrowed accounts harder to add. It should still be combined with name matching and broader mule-risk checks because control alone does not prove intent.

Can it improve onboarding conversion?

It removes the bank-details form, which can lose customers who do not have their account number or IFSC at hand. The customer completes one familiar UPI action instead, with confirmation in the same session and no retries caused by manually entered account details.

Can Reverse Penny Drop work on desktop or in assisted flows?

Yes. The request returns a QR code alongside app deep links, so a customer can scan it with their phone from a desktop screen or an agent’s device.

Which businesses should use these checks?

Any business that sends money to customers, sellers, workers or borrowers: lenders, insurers, marketplaces, gig platforms, wealth and broking apps, and payroll or vendor payment teams.