Facebook Marketplace QR Code Scam
INDIA — By BharatSecure Threat Intelligence Team ·
Category: UPI, WhatsApp, Lottery
Verdict Summary
Facebook Marketplace QR Code Scam shows strong scam indicators common in fraud targeting Indian users. Do not share OTPs, passwords, or payments — verify the source independently.
Risk score: 9/10 · Severity: Critical · Verdict: Suspicious
Scam Intelligence: Facebook Marketplace QR Code Scam
Proprietary signals from BharatSecure's scam-tracking database.
| Last reported | May 02, 2026 |
How Facebook Marketplace QR Code Scam Works
Overview: The Facebook Marketplace QR Code Scam is a cunning fraud that targets Indians trading goods online. Scammers lure sellers with offers to buy products and then trick them into scanning a QR code, leading to draining of their bank account via UPI. This scam is dangerous because it exploits the trust of normal individuals just trying to sell used items. How It Works: The fraudster poses as a buyer and initiates chats through Facebook Marketplace, WhatsApp, or Messenger. Once the price is agreed, the scammer claims to pay via UPI and sends a QR code, stating the seller needs to scan it to 'receive payment.' In reality, the QR is designed to initiate a UPI payment from the seller’s account to the scammer. They pressure the victim to scan immediately, often citing emergencies. After the transaction, the scammer becomes unreachable. India Angle: This scam is most common in metros like Delhi, Mumbai, Hyderabad, and Chennai, but is spreading to smaller towns as UPI adoption grows. First-time online sellers, students, and homemakers are at higher risk, along with small business owners who use Facebook Marketplace for extra income. Real Examples: - “Scan this QR to receive payment for your fridge.” - “Here’s the UPI QR to complete the transaction, click now to get the money.” Red Flags: - Buyer insists on QR code for receiving payment - Urgent or emotional appeals to scan immediately - Avoiding video calls or personal meet-ups - Buyer refuses COD or trusted digital platforms Protective Measures: - Never scan QR codes to receive money—only send/scan to pay - Use secure payment links via recognised marketplaces - Prefer cash on delivery or platform escrow - Ignore buyers who refuse to meet or verify themselves If Victimised: - Contact your bank immediately to freeze your account - Report on cybercrime.gov.in and to 1930 helpline - Warn friends and share your experience Related Scams: - OLX advance payment scams - WhatsApp group UPI lottery frauds - eBay/Quikr wallet payment fraud
How This Scam Works — Detailed Explanation
Scammers behind the Facebook Marketplace QR Code Scam target unsuspecting Indians looking to buy or sell used items on popular platforms like Facebook Marketplace, WhatsApp, or Messenger. They typically initiate conversations with sellers who have listed items for sale. These fraudsters often find their victims through organic searches or by filtering listings based on price and location. Once they've identified potential sellers, they adopt a friendly, trustworthy demeanor to build rapport and establish a sense of safety around the transaction. They often claim to be interested in buying, setting the stage for further manipulation.
The scammers employ various psychological tactics to pressure victims into making hasty decisions. They often create a sense of urgency by insisting that the item is in high demand or that they need to finalize the purchase quickly. This emotional pressure is compounded by their refusal to use standard payment methods, insisting instead that the seller scan a QR code that allegedly equals payment receipt through UPI, or Unified Payments Interface. They aim to confuse and mislead victims while maintaining a false sense of security by leveraging trust-based platforms like Facebook.
Once the victim agrees to proceed, the scams unfold in a systematic manner. The fraudster sends a QR code to the victim, claiming it will confirm the transaction and facilitate the payment—and many unsuspecting individuals fall for this ruse. After the victim scans the code, they may receive a notification indicating that the payment has gone through; however, this is a trick. Instead of receiving funds, the victim unwittingly authorizes the fraudster to drain their bank account through UPI transactions linked to their Aadhaar or bank details. In real-life cases, individuals have reported losing amounts ranging from ₹10,000 to ₹5 lakh, leaving them devastated and financially vulnerable.
The scale of the impact in India is staggering. Reports suggest that in 2022 alone, UPI scams have cost Indians over ₹1,200 crore, raising alarms at the Ministry of Home Affairs (MHA), Reserve Bank of India (RBI), and the Computer Emergency Response Team-India (CERT-In). Authorities have issued several advisories urging citizens to remain vigilant against such scams that exploit the rapidly growing digital payment ecosystem. Despite these warnings, many people continue to fall victim due to a lack of awareness and understanding about the nuances of these scams.
To differentiate between a legitimate seller and a scammer, there are specific signs to watch out for. If a buyer sends you a QR code claiming it's for receiving payment, that's a major red flag. Legitimate buyers will either want to make cash payments or use verified online payment methods. Moreover, excessive pressure to act quickly, lack of willingness to verify their identity, and limited communication without direct contact methods should raise alarms. Always approach such transactions with skepticism, and ensure you're using secure platforms known for their compliance with payment regulations before proceeding with any sales.
Visual Intelligence:
BharatSecure's AI has identified this as a used in scams targeting Indian users.
Who Does Facebook Marketplace QR Code Scam Target?
General public across India
Red Flags — How to Identify Facebook Marketplace QR Code Scam
- Buyer sends QR code claiming it's for receiving payment
- Emotional pressure to act quickly
- Refuses cash or standard digital payments
- Communication only via chat without proper verification
What To Do If You Encounter Facebook Marketplace QR Code Scam
- Report the scam to the cybercrime helpline at 1930 or visit cybercrime.gov.in immediately.
- Stop all communications with the scammer and avoid providing any personal or banking information.
- Contact your bank's customer service (SBI: 1800-11-1109, HDFC: 1800-202-6161) to report unauthorized transactions.
- Monitor your bank account for any suspicious transactions and inform your bank of any discrepancies.
- Change your UPI PIN and secure your online banking credentials to prevent further unauthorized access.
- Educate your friends and family about these types of scams to help prevent future victims.
How to Report Facebook Marketplace QR Code Scam in India
- Call 1930 — National Cyber Crime Helpline (24x7)
- File a complaint at cybercrime.gov.in
- Contact your bank immediately if money was lost
- Call RBI helpline: 14440 for banking fraud
Frequently Asked Questions
- What to do if I shared my OTP in a UPI scam?
- Immediately contact your bank using SBI's 1800-11-1109 or HDFC's 1800-202-6161 helpline to secure your account. Report the incident at cybercrime.gov.in.
- How can I identify the Facebook Marketplace QR Code Scam?
- Look for buyers who send you QR codes instead of making direct payments. Legitimate transactions require full payment confirmation before transferring goods.
- How do I report this type of scam in India?
- You can report scams through the cybercrime helpline at 1930 or file a report online at cybercrime.gov.in. Additionally, inform your bank about the fraud.
- How can I recover money or protect my accounts after this scam?
- Contact your bank immediately to report unauthorized transactions. Change your passwords and UPI PIN, and monitor your accounts more frequently for any suspicious activity.
How This Scam Works — BharatSecure AI
Spreading fastA plain-language breakdown based on 100 real reported scams of this type.
| How they reach you | Observed primary contact occurs via unsolicited phone calls, WhatsApp/SMS messages, and social media/dating platforms, where fraudsters impersonate bank officials, customer support, government agents, |
| How they gain your trust | Trust is reportedly established through impersonation of authority (banks, RBI, PM-Kisan, army officers) or emotional bonding (love-bombing, family/friend impersonation), often reinforced by AI deepfa |
| How they take your money | UPI is the dominant rail across all records, primarily via disguised 'collect/request money' notifications tricking victims into entering their PIN, d |
| Who they target | Documented targets span the general population but concentrate on the elderly and digitally inexperienced (often via caregiver dependency), urban professionals, students, homemakers, small business ow |
- authority bias (impersonating banks/government/officials)
- urgency and scarcity (account frozen, limited-time offer, emergency)
- trust/reciprocity exploitation (familiar voices, love-bombing, small initial payouts)
- Receiving a UPI 'collect/request money' notification and being asked to enter your PIN to 'receive' funds (PIN is never needed to receive money)
- Unsolicited calls/messages claiming account freeze, KYC expiry, or suspicious transaction, pressuring you to share OTP, UPI PIN, or click a link
- Requests to install remote-access/screen-sharing apps (AnyDesk, TeamViewer) for 'support' or 'refund' assistance
- Mismatched or misleading recipient names/VPAs (e.g., 'Verified Merchant', 'Bank Refund Dept') or slightly altered UPI IDs
- Pressure via emotional urgency, deepfake voice/video of familiar people, forged payment screenshots, or too-good-to-be-true offers (free recharge, prizes, grants, loans, high-return investments)
Related Scams in India
Verify Any Suspicious Message
Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.