Fake E-commerce Payment QR Scam

Verdict: Suspicious | Risk Score: 7/10 | Severity: high

Category: UPI, WhatsApp

How Fake E-commerce Payment QR Scam Works

Overview: The Fake E-commerce Payment QR Scam targets sellers and small businesses using platforms like OLX, Quikr, and Facebook Marketplace. Scammers pose as buyers, expressing interest in a listed product. When it’s time to pay, they send a QR code through WhatsApp or chat, claiming that scanning it will rapidly transfer money to the seller. Instead, scanning triggers the seller to pay the fraudster—a fake "receive payment" QR that exploits the seller’s trust in digital transactions. How It Works: After selecting a product online, the scammer requests the seller’s UPI details and shares a QR code, claiming it’s for receipt of payment. The seller, lulled by urgency or politeness, scans the code using their UPI app, enters their PIN, and unwittingly authorizes a debit to the scammer. The product

How This Scam Works — Detailed Explanation

Scammers targeting small businesses and sellers often begin their efforts on popular platforms like OLX, Quikr, and Facebook Marketplace. These platforms allow users to list various products for sale. Unsuspecting sellers post their products with attractive images and descriptions, which catch the attention of these fraudsters. The scammers, posing as potential buyers, express great interest in acquiring the listed item, spending time and effort to build a rapport with the sellers to gain their trust. This initial approach is crafted to appear genuine, leading the victim to believe they’re conversing with a legitimate buyer. By the time the payment discussion arises, the scammer has established a level of trust, making sellers more susceptible to falling for the trap.

When it comes to executing the scam, these fraudsters utilize a potent combination of tactics designed to play on the seller's emotions and cognitive biases. They often claim that for security reasons, they cannot send money directly but will instead provide a QR code that sellers can scan to receive payment instantly. They create a false sense of urgency, stating that other buyers are interested, encouraging quick action. This tactic undermines the seller's critical thinking, compelling them to comply without assessment. By the time the seller scans the provided QR code, they are unaware that they are not receiving money but are instead transferring funds directly to the scammer's account. This manipulation hinges on the trust placed in QR codes and the misconception that they are infallible and always safe.

After the seller scans the QR code, they quickly realize something is wrong. Instead of the anticipated payment being deposited into their account, they find themselves losing money instead. Victims of this scam may experience immediate confusion when they receive messages or alerts from their bank stating that a payment has been deducted from their account. Many victims are left scrambling for assistance, attempting to contact their bank’s customer service, such as SBI's helpline at 1800-11-1109 or HDFC's 1800-202-6161, only to understand that recovery may be difficult due to the nature of the transaction being essentially authorized by themselves. Real-life accounts have confirmed significant losses, with numbers indicating that millions of rupees have been siphoned off from unsuspecting sellers across India, showcasing a dire and burgeoning issue with this scam.

The ramifications of the Fake E-commerce Payment QR Scam are staggering. Reports indicate that in 2022 alone, over ₹100 crore was lost to similar scams in India. Relying on platforms such as the Ministry of Home Affairs (MHA), Reserve Bank of India (RBI), and CERT-In, these entities have cautioned against such scams. Recent advisories highlight the aggressive methods employed by cybercriminals, and the personal impact can be devastating for small businesses that suddenly find themselves drained of funds. Factors such as economic strain aggravate this issue, leading to long-lasting implications for victims, not just financially but also emotionally, as they come to terms with their trust being exploited.

Recognizing the markers of this scam versus legitimate communications is crucial for potential victims. One primary indicator is the pressure to act quickly. Legitimate buyers typically do not rush sellers into completing transactions without proper verification. Additionally, if the payment method seems unusual or is suggested to be done via a QR code for receiving payments, it’s essential to pause. Genuine payment requests should be clear and trustworthy, often guided by established payment systems that do not involve risky QR code scans. Sellers should also always verify the receiver’s credentials, rather than taking statements at face value. Practicing these due diligence steps can drastically reduce vulnerability to this insidious scam.

Visual Intelligence:

BharatSecure's AI has identified this as a used in scams targeting Indian users.

Who Does Fake E-commerce Payment QR Scam Target?

General public across India

What To Do If You Encounter Fake E-commerce Payment QR Scam

  1. Report the scam immediately at 1930 or visit cybercrime.gov.in to file a complaint.
  2. Do not engage further with the scammer if you suspect foul play; cut off all communication.
  3. Contact your bank's helpline immediately, such as SBI at 1800-11-1109 or HDFC at 1800-202-6161.
  4. Monitor your bank accounts closely for unauthorized transactions and alert your bank.
  5. Change your online passwords to enhance security and protect against further breaches.
  6. Gather all relevant information regarding the transaction and communication with the scammer.

How to Report Fake E-commerce Payment QR Scam in India

  • Call 1930 — National Cyber Crime Helpline (24x7)
  • File a complaint at cybercrime.gov.in
  • Contact your bank immediately if money was lost
  • Call RBI helpline: 14440 for banking fraud

Frequently Asked Questions

What to do if I shared my OTP in a UPI scam?
Immediately contact your bank using their helpline. For SBI, it's 1800-11-1109, and for HDFC, it's 1800-202-6161. Explain your situation and follow their advice for securing your account.
How can I identify a Fake E-commerce Payment QR Scam?
Look for signs of urgency, requests to scan QR codes for money transfer, and avoid engaging if something feels off. Always verify before acting.
How can I report this type of scam in India?
You can report the scam at 1930 or visit cybercrime.gov.in. Document all details of the transaction, and consider informing your bank as well.
What steps should I take to recover money or protect my account after this scam?
Contact your bank immediately to report the transaction. Change your passwords, monitor accounts for suspicious activity, and follow up with relevant authorities on recovery options.

Verify Any Suspicious Message

Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.