Fake QR Stickers on UPI Payment Boards — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 29, 2026

Severity: CRITICAL | View Full Scam Details

Beware of Fake QR Stickers on UPI Payment Boards in India 2026: A Growing Threat

Fake QR stickers placed on UPI payment boards are becoming a critical scam targeting everyday Indian shoppers and merchants, risking significant financial loss in 2026.

What Is the Fake QR Stickers on UPI Payment Boards?

This scam involves fraudsters physically tampering with legitimate UPI payment boards by sticking fake QR code labels over authentic ones. They primarily target merchants such as local shops, fuel stations, restaurants, and parking lots who rely on UPI (Unified Payments Interface) for digital payments. Customers innocently scan these tampered QR codes to pay for goods or services, but their payments go to the fraudsters instead of the merchant.

The scam is spreading rapidly across cities and towns in India, with many cases reported to local police and cybercrime cells. These fake QR stickers are designed to look very similar to genuine QR codes, often researched through social media platforms like WhatsApp and Facebook to mimic the merchant’s details, making detection difficult.

While there is not yet a specific RBI or CERT-In advisory addressing fake QR stickers explicitly, both bodies have issued numerous warnings about UPI-related frauds and the importance of verifying payments before confirming transaction prompts. The Indian government’s I4C (Indian Cyber Crime Coordination Centre) and the central cybercrime helpline 1930 are actively promoting awareness of physical and digital tampering scams related to payment systems.

How This Scam Works — Step by Step

1. Target Identification: Fraudsters use WhatsApp, Facebook, or local visits to find merchants with UPI payment boards. They collect details to create counterfeit QR stickers that appear personalized to the business.

2. Placement of Fake Sticker: The criminals approach the shopkeepers often posing as sales agents or delivery persons and discreetly place fake QR code stickers over the original payment boards.

3. Customer Payment: Unsuspecting customers scan the visible QR code believing they are paying the merchant. Their UPI app opens a payment window showing the merchant's name or a close variant.

4. Transaction Completion: Customers enter the amount and confirm the payment. Instead of reaching the merchant's account, the money is transferred to the fraudster’s UPI ID.

5. Delay or Confusion: Since the merchant’s displayed QR code looks genuine, any payment complaints may be delayed or dismissed, increasing the victim’s financial loss.

6. Difficulty in Reversal: UPI payments are instant and usually irreversible unless the fraudster refunds voluntarily or the victim files a complaint swiftly through banking channels and law enforcement.

Real Warning Signs to Watch For

• QR code sticker looks newer or mismatched compared to the rest of the payment board.
• Merchant urges immediate payment without providing a digital or printed receipt.
• Name displayed on the UPI app after scanning the QR code has slight spelling differences from the business name.
• Merchant hesitant or unwilling to show the registered UPI ID linked to the QR code.
• Noticeable peeling or uneven placement of the QR sticker over another QR code.
• Receiving unexpected WhatsApp or SMS messages requiring you to scan a QR code or visit a link.
• Merchant asks to confirm payment on their phone or requests the OTP or UPI PIN (never share these).

What Happens to Victims

Victims of fake QR sticker scams often lose money directly from their bank accounts or linked wallets due to immediate UPI debits. Unlike credit card disputes, UPI transactions are typically final and hard to reverse without police intervention. The financial loss ranges from small daily expenses to significant sums depending on the transaction size.

Emotionally, victims experience stress and mistrust in digital payments, especially in rural or semi-urban India where UPI has rapidly expanded but digital literacy may be limited. Some cases also lead to Aadhaar misuse or SIM swap attempts if the fraudster obtains personal details during the fraud. These factors heighten the overall damage from such scams.

What RBI and CERT-In Say

The Reserve Bank of India (RBI) has reiterated the need for caution while making digital payments and warns users against sharing confidential credentials such as UPI PIN or OTP with anyone. RBI’s guidelines emphasize verification of the beneficiary details shown on the payment screen before approving a transaction.

CERT-In (Indian Computer Emergency Response Team) recommends vigilance when scanning QR codes to avoid malware or fraudulent transfers. The government’s cybercrime helpline 1930 offers assistance and encourages citizens to report suspicious digital fraud cases immediately.

India’s I4C portal also underlines awareness about the growing trend of QR code tampering and physical fraud attempts targeting vulnerable merchants and customers alike.

How to Protect Yourself

1. Always confirm with the merchant that the QR code is theirs and matches their registered UPI ID before scanning.
2. Look for signs of tampering such as new or uneven QR stickers over existing ones.
3. Avoid making payments if the merchant asks for your UPI PIN, OTP, or personal credentials.
4. Insist on a digital or printed receipt after payment, confirming the transaction.
5. Verify the payee name displayed in the UPI app before confirming the payment.
6. Use trusted UPI apps recommended by your bank and keep them updated to use latest security features.
7. Report suspicious QR codes or transactions promptly to the merchant and local police or cybercrime helpline 1930.

What to Do If You’ve Been Targeted

• Immediately contact your bank’s customer care and request to block or freeze your UPI account to prevent further unauthorized transactions.
• File a complaint with your local police station and register a cybercrime complaint on cybercrime.gov.in.
• Call the national cybercrime helpline at 1930 to report the incident and seek guidance.
• Check your Aadhaar and mobile number usage for any unusual activity, as fraudsters sometimes misuse personal data after such scams.
• Change your UPI PIN and other related passwords immediately.
• Keep all transaction details, screenshots, and merchant information ready for investigation.

Frequently Asked Questions

Q: How can I tell if a UPI QR code is fake or tampered?
A: Look for inconsistencies like uneven stickers, spelling differences in payee name, or new-looking QR codes covering older ones. Always verify with the merchant before payment.

Q: Can UPI money be reversed if paid to a fake QR code?
A: UPI payments are generally instant and final. Reversal is difficult unless the fraudster cooperates or a police complaint is filed promptly, enabling bank intervention.

Q: What should I do if I notice a suspicious QR sticker on a shop?
A: Do not make payments from that QR code. Inform the merchant immediately and report it to local police, the cybercrime helpline (1930), and your bank.

Stay alert and protect your money by verifying any suspicious messages or payment requests at BharatSecure.app. If you encounter fraud, report it promptly by calling 1930 or filing online.

Disclaimer: This article describes a pattern of fraud reported in public sources for public-safety awareness. It is not legal, financial, or medical advice. To request correction or removal of any content, write to hello@bharatsecure.app.