Fake QR Code Payment Scam

Verdict Summary

Fake QR Code Payment Scam is a confirmed scam. Do not engage — block the sender and report to 1930 (National Cyber Crime Helpline) immediately.

Risk score: 10/10 · Severity: Critical · Verdict: Dangerous

Scam Intelligence: Fake QR Code Payment Scam

Proprietary signals from BharatSecure's scam-tracking database.

How Fake QR Code Payment Scam Works

1. Scammer contacts a seller on marketplaces like OLX expressing interest in an item.
2. The scammer sends a QR code to the victim, claiming it is to 'receive' the payment.
3. When the victim scans the code and enters their UPI PIN, money is debited from their account instead of being credited.
4. Often involves a small 'test' transaction first to build trust.

How This Scam Works — Detailed Explanation

The Fake QR Code Payment Scam is a growing threat in India’s digital payment landscape, particularly targeting UPI users. Scammers create fake QR codes that look genuine and place them where people expect to see real payment options — on walls of shops, social media posts, WhatsApp messages, or even sent directly via chat apps. They trick victims into scanning the QR codes under the false pretense that scanning will help them receive money instantly, which is not how UPI works. QR codes in UPI apps are meant only for paying, not for receiving money. Once the victim scans the fake QR code, the scammer gains access to initiate unauthorized payments, draining the victim’s linked bank accounts without their explicit knowledge.

These fraudsters often combine social engineering tactics with technical deception. For example, they may send messages or WhatsApp forwards showing fake transaction success screenshots or use popular UPI app logos to mask malicious links or QR codes. They might pressure victims to scan multiple QR codes quickly, creating confusion and panic, and trick them into authorizing payments without proper verification. This pressure can cause victims to miss key signs like the UPI app showing a payment prompt instead of a receive request. Many Indian users, especially elderly or less tech-savvy individuals, fall prey to this scam because they are unfamiliar with how UPI works or the difference between payment and receiving codes.

Once the QR code is scanned and the victims unknowingly authorize payments through their UPI app, scammers rapidly transfer money from the victim’s bank account to multiple accounts, often through a network of mule accounts to cover their tracks. Because UPI transactions happen almost instantly, victims may realize too late, by which time the money is already gone. Victims often report seeing unusual debits in their bank statements or receiving OTPs for transactions they never initiated. With the growth of mobile banking apps and easy access to smartphones in India, these scams are becoming more common and causing significant financial losses.

To make matters worse, scammers exploit India’s diverse UPI ecosystem. They create fake QR codes using the names of popular UPI apps like Google Pay, PhonePe, or Paytm, leveraging the trust users have in these brands. They might also falsely claim to be government employees or bank officials, asking victims for Aadhaar-linked bank details and OTPs to "verify" or "unlock" money. This adds to the confusion and makes the scam look legitimate. Understanding how this scam operates and recognizing key warning signs is crucial for every UPI user in India to avoid falling victim in 2026 and beyond.

Visual Intelligence: Fake Template Detection

BharatSecure's AI has identified this as a fake template detection used in scams targeting Indian users.

Who Does Fake QR Code Payment Scam Target?

Online marketplace sellers and UPI users

Red Flags — How to Identify Fake QR Code Payment Scam

• Scanning a QR code to 'receive' money (QR codes are only for paying)
• The UPI app showing a 'Pay' prompt instead of 'Receive'
• Pressure to scan multiple codes in quick succession

What To Do If You Encounter Fake QR Code Payment Scam

1. Never scan a QR code claiming to be for receiving money; UPI QR codes are only for making payments.
2. Check your UPI app carefully to see if it prompts you to ‘Pay’ or ‘Receive’ before authorizing any transaction.
3. Immediately block your UPI app and bank account if you notice unauthorized transactions or receive unexpected OTPs.
4. Report the scam to your bank’s customer support and the National Cyber Crime Reporting Portal (cybercrime.gov.in).
5. Inform family members and friends about this scam to spread awareness and prevent more victims.

How to Report Fake QR Code Payment Scam in India

• Call 1930 — National Cyber Crime Helpline (24x7)
• File a complaint at cybercrime.gov.in
• Contact your bank immediately if money was lost
• Call RBI helpline: 14440 for banking fraud

Frequently Asked Questions

What is Fake QR Code Payment Scam?

Fake QR Code Payment Scam is a reported upi/bank scam that BharatSecure has documented as affecting Indian users. Fraudsters use it to trick victims into sharing money, OTPs, or personal and banking details. It currently carries a risk rating of 10/10 (Critical).

Is Fake QR Code Payment Scam dangerous, and how common is it in India?

Yes. This scam is rated Critical severity (10/10) because it can lead to direct financial loss or identity theft. It spreads through SMS, WhatsApp, phone calls, and fake websites, and variants are reported across India throughout the year. Treat any unexpected message or call matching this pattern as suspicious until verified.

How can I protect myself from Fake QR Code Payment Scam?

Never scan a QR code claiming to be for receiving money; UPI QR codes are only for making payments. Check your UPI app carefully to see if it prompts you to ‘Pay’ or ‘Receive’ before authorizing any transaction. Immediately block your UPI app and bank account if you notice unauthorized transactions or receive unexpected OTPs. Report the scam to your bank’s customer support and the National Cyber Crime Reporting Portal (cybercrime.gov.in). Never share OTPs, UPI PINs, card numbers, or passwords; verify any request independently using official numbers from the company's real website; and avoid clicking links in unsolicited messages.

How do I report Fake QR Code Payment Scam in India?

Call 1930 (the National Cyber Crime Helpline) within 24 hours for the best chance of recovering funds, and file a complaint at cybercrime.gov.in with screenshots and transaction details. Notify your bank's fraud team to freeze transactions, and report the suspect UPI ID or phone number to BharatSecure so other users can be warned.

A plain-language breakdown based on 100 real reported scams of this type.

Related Scams in India

• AI Voice Cloning Scams
• APK-Based OTP Interception
• AnyDesk Remote Access Bank Fraud
• Bank OTP Validation Fraud
• Deepfake Family Impersonation Scams

Verify Any Suspicious Message

Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.