JPGPay User Safety Guide – Trade Securely on the P2P Platform

Your JPGPay account holds your token balance, trading history, and referral earnings. Securing it from the start is the single most impactful thing you can do as a new user.

• Create a strong, unique password: Use at least 8 characters combining uppercase letters, lowercase letters, numbers, and symbols. Do not recycle passwords from other apps or websites.
• Your OTP is yours alone: JPGPay logs you in using an OTP sent to your registered mobile number. No support agent, administrator, or known contact should ever ask you for it. Anyone who does is attempting fraud.
• Never share your password: If someone else gains access to your JPGPay account, they can drain your token balance, misuse your referral link, and compromise your trading history.
• Log out from shared or public devices: If you ever access JPGPay on someone else's phone or a public device, log out as soon as you are done. Do not allow the browser to save your credentials.
• Lock your phone: Use a PIN, pattern, fingerprint, or face recognition to lock your phone. If your phone is stolen without a lock, the thief can access your JPGPay account directly.
• Change your password every 2–3 months: Regular password updates reduce the risk of unauthorised access, especially if you use the same password across multiple platforms.
• Watch for account takeover attempts: If you receive an unexpected OTP you did not request, change your password immediately and report the incident through in-app support.

Fake JPGPay apps are one of the most widespread threats facing Indian P2P trading users. These clones look identical to the real app but are designed to steal your credentials, intercept your OTP, or install malware on your device.

• Only download from jpgpay.org.in: This is the one and only legitimate source for the JPGPay APK. Do not download from third-party sites, file-sharing platforms, or Telegram links.
• Verify the URL every time: Before downloading, double-check your browser's address bar. The domain must read exactly as jpgpay.org.in. Watch for imposters like jpgpay-app.com, jpgpay.co.in, or jpgpayofficial.in.
• Check the app name and icon after install: Once installed, the app should appear as "JPGPay" with the official logo. Altered names like "JPGPay Pro" or "New JPGPay" are signs of a fake.
• Check the APK file size: The official JPGPay APK is approximately 25–35 MB. A file significantly smaller or larger than this may have been tampered with.
• Scan the file before installing: Use your phone's built-in security scanner or a trusted antivirus app to scan the downloaded APK before you open it.
• Enable "Unknown Sources" only temporarily: You must allow installations from unknown sources to sideload an APK. Enable it only for your browser, complete the installation, and then disable it again immediately.

Because JPGPay is a P2P platform, every rupee moves directly between two users through UPI. The platform never handles your money. This gives you full control — but it also means the responsibility of verifying payments falls entirely on you.

When You Are the Seller (Receiving Payment)

• Open your own UPI or bank app — never trust a screenshot that the buyer sends. Payment screenshots take 30 seconds to fake with free editing tools.
• Confirm the exact amount received matches the order total down to the last paisa.
• Match the sender's name and UPI ID against the buyer's profile shown in the JPGPay order page.
• Check the transaction status shows "Success" — not "Pending", "Processing", or "Initiated". Pending transactions are not payments.
• Only then confirm payment inside the JPGPay app to release tokens to the buyer.

When You Are the Buyer (Sending Payment)

• Send money only to the UPI ID shown in the app for that specific order. Never accept a different UPI ID sent to you through private messages.
• Copy the UPI ID carefully from the app — a single wrong character will send money to the wrong person and it cannot be retrieved.
• Save a screenshot of your successful payment as evidence in case a dispute arises later.
• If the seller does not release tokens after 15–20 minutes, message them from the order page. If they do not respond, raise an in-app appeal immediately.

Fraudsters who target JPGPay users are creative and persistent. Below are the most frequently reported scam patterns and exactly how to protect yourself from each:

Before you log in, trade, or share any information, take 30 seconds to verify you are using the legitimate JPGPay platform:

• Check the website domain: The only official website is jpgpay.org.in. Look at your browser's address bar each time. Watch for extra words, hyphens, or different endings like .com, .co.in, .org, or .app.
• Check the app origin: The JPGPay app should have been downloaded from jpgpay.org.in only. On Android, go to Settings → Apps → JPGPay and check the package name and install source.
• Use the official Telegram channel: The only genuine channel is linked directly from the footer of jpgpay.org.in. Never join a Telegram group found through a Google search or unsolicited invitation.
• Test in-app support: The real JPGPay platform has a live support chat accessible 24/7 from inside the app. If a site or app claiming to be JPGPay has no in-app support, it is not the real platform.
• No public phone number: If a website shows a JPGPay helpline number, that website is fake. The real platform has no phone support by design.

Understanding what personal data JPGPay holds about you helps you make informed decisions about your own privacy and security.

• What JPGPay collects: Your registered mobile number (for login and OTP), your trade transaction history (for order matching and dispute resolution), and basic device information (for technical support).
• What JPGPay does NOT collect: Your UPI PIN, bank account numbers, Aadhaar, PAN card, or any government-issued ID. JPGPay uses a P2P model — payments go directly between users without passing through the platform.
• How your data is used: Your mobile number enables login and OTP verification. Your trade history is used to match orders, calculate referral commissions, and resolve disputes. Basic device data helps the support team diagnose technical issues.
• Third-party sharing: JPGPay does not sell or rent your personal data. Trade details may be visible to the counterparty in a dispute, but only to the extent needed for resolution.
• Your responsibility: Never share your OTP, password, or app credentials with anyone — including people who claim to be JPGPay staff. The platform will never ask for these through external channels.

For the complete data handling policy, read the JPGPay Privacy Policy.

Even careful traders occasionally face problems. Here is exactly what to do in each common scenario:

Buyer has not paid after accepting your offer

• Wait 15 minutes — the buyer may still be processing the payment.
• Send a polite message through the order chat asking for an update.
• If there is no response or the buyer is making excuses, cancel the order. You are not obligated to wait indefinitely.

You paid but the seller has not released tokens

• Wait 15–20 minutes. Some sellers check their bank app manually.
• Message the seller through the order page and share your UPI payment confirmation screenshot.
• If there is no response after 30 minutes, raise an in-app appeal immediately with your payment proof.

Withdrawal delayed beyond 48 hours

• First, check that your UPI ID or bank account details in the app are entered correctly.
• If details are correct, raise an in-app appeal with your withdrawal request ID.
• The support team will investigate and respond through in-app chat.

How to raise an in-app appeal

• Open JPGPay → go to the specific order or transaction.
• Tap "Appeal" or "Raise Dispute".
• Write a clear, factual description. Attach all payment screenshots and chat evidence.
• Submit — support typically responds within a few hours.

Safety on JPGPay is not only about avoiding scammers — it is also about making sound financial decisions every time you trade.

• Begin with small amounts: Trade only what you are fully comfortable losing while you are learning. Do not increase your stake until you have completed at least 10–15 successful trades and understand the platform well.
• Never trade with borrowed money: Do not use money from credit cards, loans, or funds needed for essential household expenses. Token trading is not a reliable income source and losses are always possible.
• Understand token price volatility: The value of tokens can rise or fall quickly. What you buy today may be worth less by the time you sell. There are no guaranteed returns in P2P trading.
• Do not try to recover losses quickly: If you lose on a trade, the instinct to make a bigger trade to "win it back" is dangerous. Step back, assess what went wrong, and return only when you are calm.
• Keep records of all trades: Save your trade confirmations, UPI receipts, and withdrawal histories. These records matter for dispute resolution and for accurate tax filing.
• Know your tax obligations: Earnings from token trading and referral commissions may be taxable under Indian law. Consult a qualified tax professional to understand what you are required to declare.
• Reject FOMO pressure: Fraudsters and over-eager promoters use urgency — "Price jumping tomorrow!", "Last 10 slots!", "Join now or miss out!" — to force hasty decisions. Take your time. A genuine opportunity will not disappear if you take 24 hours to think.

A lost phone with JPGPay installed is a serious security risk because anyone with your phone can receive your OTP and access your account. Act immediately:

• Call your mobile operator right away and ask them to block your SIM card. This stops anyone from receiving OTPs sent to your number.
• Access JPGPay from another device (a friend's phone or another phone you own) and change your password immediately.
• Contact in-app support to report the lost device. The support team can flag your account for suspicious activity.
• Check your recent trade history for any transactions you did not make. If you find unauthorised activity, raise an in-app appeal with full details.
• Once you have a replacement SIM with the same number, you can log back in using OTP verification and resume normal activity.

Save this checklist on your phone or print it out. Run through it before every trading session: