QR Code Payment Reversal Scam on OLX and Quikr — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated Jun 09, 2026

Severity: Critical | View Full Scam Details

Beware the 2026 QR Code Payment Reversal Scam on OLX and Quikr in India

A new, critical scam targeting buyers and sellers on OLX and Quikr exploits UPI QR code payments and WhatsApp, causing serious financial loss.

What Is the QR Code Payment Reversal Scam on OLX and Quikr?

This scam involves fraudsters exploiting India’s popular online marketplaces OLX and Quikr, platforms widely used for buying and selling secondhand goods. Buyers and sellers primarily transact using UPI QR codes shared via WhatsApp, which fraudsters manipulate to trick victims into paying money that is later reversed.

The scam targets people who prefer quick digital payments on these platforms but may not fully verify payment details or transaction completion. It has been reported increasingly across India, with victims from cities and small towns alike. According to public complaints to police and advisories by CERT-In, scammers impersonate genuine buyers or sellers through WhatsApp messages, claiming payment was made via a QR code. They then prompt victims to confirm or scan fake QR codes, leading to fake payment confirmations. Victims lose money when the fraudsters initiate fraudulent payment reversals or use compromised UPI IDs.

The Reserve Bank of India (RBI) and the Indian Cyber Crime Coordination Centre (I4C) have issued general guidelines warning about the risks of UPI frauds involving QR codes and social media platforms like WhatsApp but have advised users to remain vigilant as new variants continue emerging.

How This Scam Works — Step by Step

1. Initial Contact via WhatsApp: The alleged buyer or seller contacts the victim on WhatsApp, expressing interest in the product listed on OLX or Quikr.

2. Sharing a UPI QR Code: The fraudster sends a UPI QR code, claiming it is for instant payment. The victim scans the QR code or enters the UPI ID believing they are sending money safely.

3. Fake Payment Confirmation: The scammer shares a forged screenshot or message appearing like a UPI payment confirmation, convincing the victim that the transaction succeeded.

4. Request for Reversal or Additional Verification: Soon after, the fraudster calls or messages, claiming there was a glitch or double payment and asks the victim to initiate a UPI payment reversal or scan another QR code for verification.

5. Money Lost in Reversal: In reality, the original payment never reached the victim’s account. When the victim reverses the payment or sends money again to the fraudster’s UPI ID, they lose that money.

6. Disappearing Fraudster: The scammer then blocks the victim and disappears, leaving the victim with no recourse.

This scam’s reach continues growing because UPI transactions are instant, often without immediate confirmation via bank statements, and WhatsApp is a trusted messaging tool for millions of Indians.

Real Warning Signs to Watch For

• The buyer or seller insists on payment through WhatsApp only, avoiding official platform payment methods.
• The UPI QR code changes multiple times or looks suspicious (e.g., QR code images shared via comment rather than direct message).
• Requests to perform a payment reversal soon after payment “confirmation.”
• Fake or blurry UPI payment screenshots that don’t match the victim’s bank app details.
• Callers claiming to be from government agencies (RBI, CERT-In) or OLX/Quikr support urging immediate action.
• Pressure to scan multiple QR codes or send money repeatedly.
• Asking for Aadhaar or bank details to “verify” the transaction via WhatsApp or calls.

What Happens to Victims

Victims suffer immediate financial loss in Indian Rupees (₹), often losing thousands or lakhs depending on the item value. Because UPI payments are instant and reversible only through user action, victims unwittingly send money to the scammer’s account during a fake reversal process.

Emotionally, victims experience stress and helplessness since the fraud occurs via trusted apps like WhatsApp and popular platforms OLX/Quikr. Many victims report feeling betrayed and lose faith in digital payments. Some also face difficulties reporting fraud due to limited understanding of cybercrime complaint procedures or delays by banks in blocking compromised UPI IDs.

In some reported cases, Aadhaar number misuse or SIM swap fraud has accompanied the scam, worsening the victims' predicament by enabling scammers to access multiple accounts or identity verification services.

What RBI and CERT-In Say

The RBI has repeatedly cautioned users against sharing UPI PINs, OTPs, or transaction details with anyone and stressed verifying payment status only through official bank apps. Its guidelines also warn users to be wary of instant payment reversals initiated outside banking apps.

CERT-In emphasizes not sharing personal or bank information on WhatsApp and to avoid scanning QR codes sent by unknown parties. The Indian Cyber Crime Coordination Centre encourages reporting any digital fraud at cybercrime.gov.in or by calling the national helpline 1930 immediately.

These agencies promote digital payments but urge users to stay vigilant about scams on social platforms like WhatsApp, OLX, and Quikr, especially involving UPI QR codes and payment reversals.

How to Protect Yourself

1. Always verify payment status directly on your official bank or UPI app before acting on any WhatsApp message.

2. Do not scan QR codes sent by unknown buyers/sellers; confirm UPI IDs independently.

3. Avoid making or reversing payments without clear confirmation of receipt from your bank.

4. Never share your UPI PIN, OTP, Aadhaar details, or bank login credentials with anyone, including someone pretending to be official support.

5. Use payment methods recommended within OLX or Quikr platforms instead of WhatsApp for transactions.

6. If contacted by someone claiming to be from government agencies or platform support, verify their identity by calling official helplines before proceeding.

7. Set UPI limits and enable transaction alerts on your phone to monitor payments immediately.

What to Do If You’ve Been Targeted

1. Immediately contact your bank to freeze or block UPI transactions and request a fraud alert.

2. Report the incident at cybercrime.gov.in and provide all evidence, including WhatsApp chats and payment screenshots.

3. Call the 1930 cybercrime helpline for guidance on filing police complaints and recovering funds.

4. File a complaint with OLX or Quikr customer support explaining the scam details.

5. Change your UPI PIN and check linked bank accounts for suspicious activity.

6. Inform your telecom operator if you suspect SIM swap or Aadhaar misuse.

7. Keep a record of all communications with the fraudster and authorities for follow-up.

Frequently Asked Questions

What if I already scanned a QR code and sent money?
Check your bank app immediately to verify the transaction status. If you suspect fraud, contact your bank to block your UPI transactions and report the matter through cybercrime.gov.in and the 1930 helpline for urgent assistance.

Can I get my money back if I reversed a payment on request?
UPI reversals initiated by users based on fake requests are difficult to recover since the victim authorizes the transaction. Promptly reporting to your bank and cybercrime authorities increases the chance of tracing and recovering funds but there is no guarantee.

How can I verify if a WhatsApp message about payment is genuine?
Always verify the payment status on your official UPI or bank app. Do not trust only WhatsApp messages or screenshots. Contact the buyer or seller independently via the marketplace’s official communication channels or phone to confirm.

For any suspicious messages or doubts, always verify on BharatSecure.app and report suspicious activity immediately by calling the 1930 helpline.

Disclaimer: This article describes a pattern of fraud reported in public sources for public-safety awareness. It is not legal, financial, or medical advice. To request correction or removal of any content, write to hello@bharatsecure.app.