Fake QR Code Payment Scam

फर्जी क्यूआर कोड भुगतान घोटाला

INDIA — By BharatSecure Threat Intelligence Team ·

Verdict: Dangerous | Risk Score: 10/10 | Severity: Critical

Category: UPI/Bank

How Fake QR Code Payment Scam Works

  1. Scammer contacts a seller on marketplaces like OLX expressing interest in an item.
  2. The scammer sends a QR code to the victim, claiming it is to 'receive' the payment.
  3. When the victim scans the code and enters their UPI PIN, money is debited from their account instead of being credited.
  4. Often involves a small 'test' transaction first to build trust.

How This Scam Works — Detailed Explanation

The Fake QR Code Payment Scam is a growing threat in India’s digital payment landscape, particularly targeting UPI users. Scammers create fake QR codes that look genuine and place them where people expect to see real payment options — on walls of shops, social media posts, WhatsApp messages, or even sent directly via chat apps. They trick victims into scanning the QR codes under the false pretense that scanning will help them receive money instantly, which is not how UPI works. QR codes in UPI apps are meant only for paying, not for receiving money. Once the victim scans the fake QR code, the scammer gains access to initiate unauthorized payments, draining the victim’s linked bank accounts without their explicit knowledge.

These fraudsters often combine social engineering tactics with technical deception. For example, they may send messages or WhatsApp forwards showing fake transaction success screenshots or use popular UPI app logos to mask malicious links or QR codes. They might pressure victims to scan multiple QR codes quickly, creating confusion and panic, and trick them into authorizing payments without proper verification. This pressure can cause victims to miss key signs like the UPI app showing a payment prompt instead of a receive request. Many Indian users, especially elderly or less tech-savvy individuals, fall prey to this scam because they are unfamiliar with how UPI works or the difference between payment and receiving codes.

Once the QR code is scanned and the victims unknowingly authorize payments through their UPI app, scammers rapidly transfer money from the victim’s bank account to multiple accounts, often through a network of mule accounts to cover their tracks. Because UPI transactions happen almost instantly, victims may realize too late, by which time the money is already gone. Victims often report seeing unusual debits in their bank statements or receiving OTPs for transactions they never initiated. With the growth of mobile banking apps and easy access to smartphones in India, these scams are becoming more common and causing significant financial losses.

To make matters worse, scammers exploit India’s diverse UPI ecosystem. They create fake QR codes using the names of popular UPI apps like Google Pay, PhonePe, or Paytm, leveraging the trust users have in these brands. They might also falsely claim to be government employees or bank officials, asking victims for Aadhaar-linked bank details and OTPs to "verify" or "unlock" money. This adds to the confusion and makes the scam look legitimate. Understanding how this scam operates and recognizing key warning signs is crucial for every UPI user in India to avoid falling victim in 2026 and beyond.

Visual Intelligence: Fake Template Detection

BharatSecure's AI has identified this as a fake template detection used in scams targeting Indian users.

Who Does Fake QR Code Payment Scam Target?

Online marketplace sellers and UPI users

Red Flags — How to Identify Fake QR Code Payment Scam

  • Scanning a QR code to 'receive' money (QR codes are only for paying)
  • The UPI app showing a 'Pay' prompt instead of 'Receive'
  • Pressure to scan multiple codes in quick succession

What To Do If You Encounter Fake QR Code Payment Scam

  1. Never scan a QR code claiming to be for receiving money; UPI QR codes are only for making payments.
  2. Check your UPI app carefully to see if it prompts you to ‘Pay’ or ‘Receive’ before authorizing any transaction.
  3. Immediately block your UPI app and bank account if you notice unauthorized transactions or receive unexpected OTPs.
  4. Report the scam to your bank’s customer support and the National Cyber Crime Reporting Portal (cybercrime.gov.in).
  5. Inform family members and friends about this scam to spread awareness and prevent more victims.

How to Report Fake QR Code Payment Scam in India

  • Call 1930 — National Cyber Crime Helpline (24x7)
  • File a complaint at cybercrime.gov.in
  • Contact your bank immediately if money was lost
  • Call RBI helpline: 14440 for banking fraud

Frequently Asked Questions

What is Fake QR Code Payment Scam?
Dangerous: Fake QR Code Payment Scam. Fraudsters use fake QR codes on UPI to drain bank accounts. Never scan a code to receive money. Stay safe in India 2026.
How does Fake QR Code Payment Scam work?
Scammer contacts a seller on marketplaces like OLX expressing interest in an item. The scammer sends a QR code to the victim, claiming it is to 'receive' the payment. When the victim scans the code and enters their UPI PIN, money is debited from their account instead of being credited. Often involves a small 'test' transaction first to build trust.
How to protect yourself from Fake QR Code Payment Scam?
Never scan a QR code claiming to be for receiving money; UPI QR codes are only for making payments. Check your UPI app carefully to see if it prompts you to ‘Pay’ or ‘Receive’ before authorizing any transaction. Immediately block your UPI app and bank account if you notice unauthorized transactions or receive unexpected OTPs. Report the scam to your bank’s customer support and the National Cyber Crime Reporting Portal (cybercrime.gov.in).
How to report Fake QR Code Payment Scam in India?
Report to cybercrime.gov.in or call 1930 (National Cyber Crime Helpline). You can also contact your local police station's cyber cell.

Related Scams in India

Verify Any Suspicious Message

Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.