डिजि लिफ़ाफ़ा
← Blog
How it works5 August 2026

Is this safe? A straight answer

We will be blunt about something most sites in this space would not admit: an app that shows you a UPI ID and a pay button is, structurally, the same shape as a phishing page. We know that. It shaped how the whole thing is built.

What we do about it

  • The pay screen is only ever reachable by the person who made the lifafa, it lives behind a private link that is not the link you share. Someone cannot make a lifafa and send you the pay screen.
  • The UPI ID is shown in full, large, right above the button. We never shorten it, never hide it behind a logo, never abbreviate it.
  • The payment link is never triggered automatically. It always takes a deliberate tap from you.
  • Once a lifafa is made, the UPI ID, the amount, the names and the message can never be edited by anyone, including us. That kills the attack where a nice link circulates in a family group and the UPI ID is swapped later.
  • Links inside messages are stripped out entirely. A gift envelope has no business carrying a link, and allowing them would turn this into a delivery mechanism for scams.
  • There is a cap of ₹21,000, which keeps the whole thing unattractive for serious fraud.

What you should still do

Check the UPI ID before you pay. Read it, properly, character by character. It is displayed in full precisely so you can. If you did not ask this person for their UPI ID yourself, or the amount is not what you expected, stop.

And the general rule, which is older than us and applies everywhere: only send shagun to people you actually know.

What we cannot do

We cannot reverse a payment, confirm one, or refund one. The money never enters our control, so there is nothing for us to reverse. If you pay the wrong UPI ID, that is between you, your bank and NPCI, exactly as it would be if you had typed it into your UPI app yourself, which is effectively what happened.

Make one yourself

Free, no signup, about a minute.

Make a lifafa