Free Gift or Festival Lucky Draw QR Scam

Verdict: Suspicious | Risk Score: 7/10 | Severity: high

Category: UPI, WhatsApp, Phishing

How Free Gift or Festival Lucky Draw QR Scam Works

Overview: Fraudsters prey on the festival spirit in India—be it Diwali, Holi, or Republic Day—by distributing flyers or WhatsApp forwards with QR codes promising free prizes, gifts, or lucky draw entries. Instead of bonanzas, victims are led to phishing sites or induced to send money out of their UPI wallets. This scam thrives on excitement for deals and discounts, targeting all age groups in urban and rural India. How It Works: Criminals distribute physical leaflets or set up booths at events, or circulate festival-themed digital forwards through messaging apps. The QR promises 'guaranteed prize!' or "Scan for free sweets on Diwali." When scanned, it may: (1) auto-initiate a UPI collect; (2) direct to a data-theft site asking for UPI or Aadhaar details; or (3) silently subscribe users to premium SMS/OTT charges. India Angle: This scam is frequently seen at public events, college campuses, shopping malls, and religious fairs. Platforms affected include all major UPI operators and payment apps, with language tailored to the festival or audience (Hindi during Holi, regional dialects during Pongal, etc.). Rural and semi-urban populations are equally targeted. Real Examples: During Holi celebrations in Lucknow, students received colorful leaflets stating 'Scan to Win Gift Hamper!' Those who scanned either lost money through UPI debit or were redirected to sites asking for Aadhaar and mobile details. Red Flags: Flyers or WhatsApp forwards promising gifts or prizes for simply scanning; requests for personal/UPI info after scanning; generic terms and zero official branding; pushy event staff or unfamiliar people circulating QRs at functions; destination sites with odd URLs. Protective Measures: Ignore unsolicited prize-laden QR codes; verify with venue/event organizers before scanning; inspect for legitimate branding; avoid entering any credentials on forwarded sites; use only official apps for payment or event participation. If Victimised: Call your payment provider or bank; block further transactions; report to 1930 cyber helpline and cybercrime.gov.in; save evidence and alert event management. Related Scams: 1) WhatsApp lottery messages demanding money; 2) Festival discount codes leading to phishing; 3) Gift card scams using UPI collect requests.

How This Scam Works — Detailed Explanation

During festival seasons in India, scammers take advantage of the celebratory spirit by distributing flyers that promise free gifts or entry into a lucky draw. These flyers might be found in high-traffic areas, like outside temples during Diwali, at public celebrations for Holi, or even through WhatsApp forwards sent to friends and family. The flyers often feature colorful graphics and enticing claims, suggesting easy rewards for a simple action: scanning a QR code. Victims are often approached by overly enthusiastic event staff who urge them to participate, creating a sense of urgency that clouds judgment. This setup preys on the excitement of the festivals, making individuals more susceptible to scams.

Scammers use various psychological tactics to lure victims, manipulating human emotions such as greed and curiosity. Victims are initially drawn in by the allure of 'free' offers, often ignoring any potential red flags. Once a victim scans the QR code, they are redirected to a phishing website that resembles a reputable site, requesting sensitive information such as their UPI PIN or Aadhaar details. Convincing language and a seamless user experience are designed to enhance the legitimacy of the site, causing victims to underestimate the risk they are taking. Furthermore, the apparent scarcity of the 'offer' plays into someone's fear of missing out (FOMO), thus pushing them to act quickly without thinking critically.

For victims, the fallout begins almost immediately after engaging with these fraudulent QR codes. After scanning, they may receive prompts for their UPI PIN after which their funds can be transferred to the scammers' accounts. For instance, a recent case in Delhi saw an individual lose ₹5 lakh after believing they had won a gadget from a supposedly reputable brand during a festival event. Many victims initially believe they can retrieve their lost funds, only to discover that once the money is sent, there is little recourse. The situation can worsen when personal information like an Aadhaar number is compromised, leading to identity theft or unauthorized transactions.

The impact of these scams on the Indian public is staggering. According to the Ministry of Home Affairs (MHA), cyber frauds including such scams contributed to losses amounting to over ₹5,000 crore in 2022 alone. Reports from CERT-In highlighted this particular scam as a growing concern, fostering a need for public awareness campaigns. With the increasing reliance on digital transactions facilitated by UPI, especially post-COVID, it is vital for users to remain vigilant. The lack of awareness significantly amplifies the likelihood of falling victim to such schemes, and the thrill associated with winning free gifts further complicates critical thinking.

To avoid becoming a victim of such scams, it becomes essential to distinguish between legitimate promotional communications and potential cons. Legitimate gift offers should be from verified sources, and you should always be skeptical of requests for sensitive financial information. Check the branding on any flyers or messages received; if they appear unbranded or of poor quality, consider that a red flag. It is also crucial not to engage with overly aggressive marketers on-site during festival events or via WhatsApp messages. If there's uncertainty, choosing to consult a trusted source or reporting the communication to authorities is always wise.

Visual Intelligence:

BharatSecure's AI has identified this as a used in scams targeting Indian users.

Who Does Free Gift or Festival Lucky Draw QR Scam Target?

General public across India

Red Flags — How to Identify Free Gift or Festival Lucky Draw QR Scam

  • Promises of free gifts or prizes for scanning QR
  • Requests for UPI PIN or Aadhaar after scanning
  • Unbranded flyers or digital forwards
  • Event staff pushing you to scan
  • Unknown or odd-looking website after scanning

What To Do If You Encounter Free Gift or Festival Lucky Draw QR Scam

  1. Report the scam to the cybercrime helpline by calling 1930 or visiting cybercrime.gov.in.
  2. Do not share your UPI PIN or Aadhaar details with anyone you do not trust.
  3. Contact your bank immediately if you suspect any fraudulent activity on your account.
  4. Block the sender on WhatsApp if you receive unsolicited messages with QR codes.
  5. Keep a record of any messages or flyers related to the scam for reporting purposes.
  6. Share information about this scam with friends and family to raise awareness.

How to Report Free Gift or Festival Lucky Draw QR Scam in India

  • Call 1930 — National Cyber Crime Helpline (24x7)
  • File a complaint at cybercrime.gov.in
  • Contact your bank immediately if money was lost
  • Call RBI helpline: 14440 for banking fraud

Frequently Asked Questions

What to do if I shared my OTP in a UPI scam?
Immediately contact your bank's customer service. For SBI, call 1800-11-1109, and for HDFC, call 1800-202-6161. Report the incident to the cybercrime helpline at 1930.
How to identify the Free Gift or Festival Lucky Draw QR Scam?
Look for unbranded flyers promising unrealistic rewards, and watch out for pressure to scan QR codes quickly.
How can I report this type of scam in India?
You can report the scam by calling 1930, visiting cybercrime.gov.in, or notifying your bank about the fraudulent activity.
What steps should I take to recover money or protect my account after this scam?
Contact your bank immediately to freeze your account, file a complaint with the cybercrime helpline, and, if necessary, change your UPI PIN and passwords.

Verify Any Suspicious Message

Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.