You’ve just closed a deal online. The buyer insists on paying via UPI and sends you a QR code to scan. You expect money to be credited, but instead—your bank balance drops. You’ve been hit by a fake QR code scam.
QR code payments have become second nature in India, making everyday transactions quick and seamless. In fact, UPI recorded over 18.4 billion transactions in June 2025 alone, according to NPCI data. But this very convenience has opened the door to a growing threat. Fraudsters are now exploiting QR codes to deceive users into unknowingly transferring money. These scams are becoming a common type of UPI fraud, especially in peer-to-peer deals on platforms like OLX.
Fraudsters rely on one thing—your habit of trusting QR codes. They know you’ve scanned them at shops, delivery points, and petrol pumps without a second thought. That same trust is now being used against you.
In this blog, you’ll learn how QR code scams work, how to spot a suspicious QR code, and what to do if you’ve been tricked into scanning one.
What Is a QR Code Scam?
A QR code scam is a type of fraud where scammers trick you into scanning a tampered or fake QR code to steal money or personal data. These codes often appear legitimate, but once scanned, they can trigger unauthorised payments or silently capture sensitive information—especially when you expect to receive money or access a service.
How Fake QR Code Scams Work?
- The fraudster generates a fake QR code and sends it to you—usually over WhatsApp, chat, or during a call—claiming it’s to send you money.
- The scammer tells you, “Scan this QR code to receive the payment.” It sounds easy and believable, especially if you’ve sold something or are expecting money.
- When you scan the code, your UPI app opens a payment request, not a collection request. But you might not notice this because you’re expecting money, not paying it.
- Believing it’s part of receiving the money, you authorise the transaction. This actually sends your money to the scammer.
- In another version of the scam, scanning the QR code opens a fake website that looks like your bank or UPI app. If you enter your login details or OTP, the scammer captures them and uses them to steal your money.
- These QR code payment scams are commonly seen in online classified ads, doorstep deliveries, fake customer support chats, and refund-related calls.
Real-Life Examples in India
1. Bengaluru Professor Loses ₹63,000 While Selling a Washing Machine
A 30-year-old professor from the Indian Institute of Science, Bengaluru, listed his washing machine for sale on an online marketplace. A buyer contacted him, agreed to the listed price without any negotiation, and said he would send the payment via UPI.
Instead of directly transferring the money, the buyer sent a QR code and asked the professor to scan it to “receive” the amount. Trusting the process, the professor scanned the code—and instantly lost ₹63,000 from his bank account. The QR code was fake. It was designed to pull funds from his account, not send any.
2. OLX Seller Loses ₹1.9 Lakh After Scanning Multiple QR Codes
Siddarth posted an ad on OLX to sell his air cooler for ₹5,200. Within minutes, he received a call from someone claiming to be a used furniture dealer from Whitefield, Bengaluru. The buyer agreed to pay in advance and sent Siddarth a QR code worth ₹5, asking him to scan it to confirm the payment process.
Siddarth scanned the code and received ₹5. This was the bait. Next, the buyer sent a QR code for ₹5,200. This time, when Siddarth scanned it, ₹5,200 was debited from his account.
Still trusting the buyer, Siddarth followed instructions and scanned additional QR codes sent to “resolve the issue.” Each scan drained more money. By the time he realised it was a scam, over ₹1.9 lakh had been withdrawn from his accounts.
The scammer then asked him to add a bank account as a beneficiary—this finally triggered Siddarth’s suspicion. He blocked his account and filed a complaint with the cybercrime helpline and local police.
3. Banking Executive’s Family Loses ₹46,000 While Selling an Inverter Online
Even financially aware individuals are not immune. A 31-year-old vice president at an investment banking firm became a victim when his wife listed an inverter and battery for sale on OLX. A buyer approached them, posed as a genuine customer, and offered to pay via UPI.
He sent a QR code saying it was needed to make the payment. Believing they were about to receive money, they scanned it. Instead of receiving funds, ₹46,000 was withdrawn from their account. Just like the others, this fake payment QR code was set up to authorise outgoing payments rather than incoming transfers.
Red Flags to Spot a Fake QR Code
Spotting a fake QR code scam early can save you from financial loss. Here are some clear warning signs you should never ignore:
- If someone tells you to scan a QR code to receive money, it’s a red flag. In UPI, you never need to scan anything to get paid—only to make a payment.
- Be cautious if the QR code is sent by a stranger or appears on a random website, printed slip, or blurry image. Fraudsters often use screenshots or low-quality photos to avoid detection.
- If scanning a QR code opens a website, check the URL carefully. Avoid it if it looks misspelled, has random characters, or doesn’t use “https” (a sign of a secure connection).
- Scammers often create a sense of urgency. They may say things like, “Refund it now,” “I’ll lose my booking,” or “Help me solve this quickly.” This pressure is meant to stop you from thinking clearly.
How to Stay Safe from QR Code Scams?
- Always verify before scanning a QR code: If someone you don’t know sends you a QR code, double-check their identity. Scammers often pretend to be genuine buyers, official customer support agents, or delivery personnel to gain your trust and convince you to scan a QR code.
- Never scan a QR code to receive money: UPI does not require scanning a code to receive a payment. If someone asks you to scan a QR code to get money, it’s a strong sign that you are being targeted in a fake QR code scam.
- Use trusted payment apps with fraud protection: Always use reliable UPI apps that offer security features like real-time fraud alerts, secure login, and warnings for suspicious transactions
- Keep UPI PIN and notifications active: Ensure that every UPI transaction on your phone requires entering your PIN. Also, keep SMS and app notifications turned on so you are immediately alerted whenever money is sent or received from your account.
- Scan only verified QR codes: Only scan QR codes that are clearly displayed at physical stores or generated within official apps. Never scan QR codes sent as images, screenshots, or links by strangers—they are often used in QR code fraud.
What to Do If You Scanned a Fake QR Code?
If you scanned a suspicious QR code, do not enter your UPI PIN or approve any payment. Simply scanning a QR code doesn’t transfer money—it’s the PIN that authorises it.
If you already made a payment, follow these steps immediately:
- Call your bank or the customer care of your UPI app without delay. Request them to freeze or reverse the transaction if possible.
- Ask the bank to temporarily block your UPI ID or linked card to prevent further misuse.
- Report the fraud at cybercrime.gov.in or call 1930 — the official helpline for online scams.
- Keep screenshots of the QR code, chat messages, transaction history, and anything else related to the scam. This will help during investigation and recovery.
Conclusion
QR code scams work because they create confusion and pressure you to act quickly without thinking. Fraudsters often use urgency—like saying it’s a refund, delivery issue, or payment confirmation—to trick you into scanning a code without checking what it actually does.
Always remember: you never need to scan a QR code to receive money. If someone tells you otherwise, it’s likely a scam.
Stay alert whenever you’re scanning a code—whether in a public place, during a customer service chat, or while dealing with someone online. It only takes a few seconds to double-check and avoid a costly mistake.
Think before you scan—your caution is your best protection.
FAQs
Q1. Can scanning a QR code result in money being deducted?
Yes. If the QR code is set up to request payment, scanning it with your UPI app and entering your PIN will result in money being transferred from your account.
Q2. How can I know if a QR code is fake?
A QR code may be fake if it comes from an unknown source, asks you to scan to receive money, or opens a suspicious or misspelled link. Always verify the sender and check the URL carefully.
Q3. Is it safe to scan public QR codes?
Not always. Scammers can replace real QR codes with fake ones in public places. Always check for tampering before scanning.
Q4. What should I do if I accidentally scanned a scam QR code?
Immediately report it to your bank or UPI app support, block your account if needed, and change your UPI PIN. Also, file a complaint at cybercrime.gov.in.
Q5. Are QR code scams increasing in India?
Yes, QR code frauds are rising in India due to the widespread use of UPI. Scammers commonly target users through online sales platforms, messaging apps, and fake customer support chats.
