What to do if I shared my OTP in a UPI scam?

Immediately contact your bank's helpline (e.g., SBI at 1800-11-1109) to report the incident and ask for guidance to secure your account.

How can I identify a QR Code Payment Trap?

If a buyer asks you to scan a QR code to receive money instead of sending UPI directly, it's likely a scam. Legitimate transactions won't require QR scans for incoming payments.

How do I report this type of scam in India?

Report the scam to the Cybercrime helpline by calling 1930 or visiting cybercrime.gov.in. Also, inform your bank to freeze your account if necessary.

How can I recover money or protect my accounts after falling for this scam?

Contact your bank immediately to block unauthorized transactions and follow their instructions. Change your passwords and monitor your accounts for further suspicious activities.

QR Code Payment Trap on Resale Platforms

INDIA — By BharatSecure Threat Intelligence Team · Updated May 26, 2026

Verdict: Suspicious | Risk Score: 9/10 | Severity: critical

Category: UPI, WhatsApp, Phishing

How QR Code Payment Trap on Resale Platforms Works

Overview: Scammers have found a new way to target Indians selling goods online through platforms like OLX, Quikr, and Facebook Marketplace. They claim that direct UPI payments aren’t working and, instead, ask sellers to scan a QR code or approve a “payment link.” This trick exploits a common misconception: that scanning a QR code can bring money into your account, when in fact, it is designed to make payments out. Such scams typically result in quick financial loss and are difficult to recover from. How It Works: The scammer initiates contact, expresses interest in your product, and insists on urgent payment using a QR code, often blaming network issues. The QR code sent by the scammer is configured to send, not receive, funds when scanned through a UPI app. Sellers scan the code expecting a credit, but when they enter their UPI PIN, money is instantly debited from their account to the fraudster’s wallet. The fraudster vanishes soon after. India Angle: This scam is rampant across Indian states where online resale culture thrives, targeting sellers unfamiliar with digital payments’ technicalities. UPI is the most misused platform, with fraudsters also exploiting Paytm and PhonePe. Victims are often first-time sellers, middle-aged homemakers, or people in tier-2 cities listing household electronics or vehicles for sale. Real Examples: - “Due to connectivity issues, please scan this code to receive payment instantly, sir.” - “My UPI is not working here, so this QR will help my account credit you, just enter your pin.” Red Flags: - Buyer insists you scan or open a QR code for payment. - Buyer emphasises urgency or technical issues as reason for workaround. - Messages contain poor grammar or are repeatedly pushing for payment completion. Protective Measures: 1. Always remember: QR codes and UPI payment prompts are used for sending, not receiving, money. 2. Never share your UPI PIN or personal banking details with anyone. 3. Use only bank transfers or verified cash payment, releasing the goods only after genuine credit confirmation. 4. For high-value items, involve a trusted third party or secure marketplace facilities for the transaction. If Victimised: - Contact 1930 and report the incident immediately. - Lodge a complaint at cybercrime.gov.in and inform your bank to freeze further transfers. - Keep all messages and QR code images as evidence. Related Scams: - Fake service provider UPI scams - Impersonation courier fraud - QR code-based phishing on WhatsApp

How This Scam Works — Detailed Explanation

Scammers are increasingly targeting individuals selling goods on popular platforms like OLX, Quikr, and Facebook Marketplace, leveraging the trust inherent in these familiar marketplace environments. These fraudsters often begin by responding to genuine listings, making it seem like they are interested buyers. They create a scenario that seems legitimate, sometimes even appearing to be from another city or claiming to be busy. To appear more convincing, they may engage in ongoing conversations through WhatsApp, often featuring fake profiles and photographs. This sets the stage for the scam, exploiting the victim's trust in online platforms and direct communications.

In their approach, scammers often employ psychological manipulation techniques to get the seller to comply with their requests. They frequently claim that direct UPI transactions are not functioning due to various reasons, such as technical issues with their bank or poor network connectivity. With the seller's anxiety about losing the sale, they present the QR code or a “payment link” as an alternative. This approach plays on the misconception that scanning a QR code could generate an instant payment to the seller's account, when in fact it is a method to authorize a payment from the seller's account to the scammer. Their insistence on urgency — pushing sellers to act quickly — adds to the pressure, often leaving victims with little time to analyze the situation critically.

Once the victim agrees to this procedure, they scan the QR code or click on a payment link, which then authorizes a transaction that debits money from their bank account without crediting anything back to them. In one instance, a seller on OLX lost ₹25,000 in less than five minutes after complying with such a request. The immediate aftermath leaves many victims shocked and scrambling to recover their lost funds. Typical outcomes include helplessness and financial strain, with sellers feeling betrayed and regretting their hasty decisions. It is essential to note that, unlike traditional bank frauds, scams conducted through UPI are challenging to trace and recover, typically leaving victims feeling powerless.

The impact of such scams has been significant in India. According to the Ministry of Home Affairs, approximately ₹2,500 crore was lost to UPI scams last year alone, with authorities frequently issuing advisories through CERT-In to create awareness about these new tactics. Data from RBI also indicates a worrying rise in such incidents, as scammers continue to evolve their methods to exploit unsuspecting users. Many people tend to underestimate the risk associated with QR codes, further contributing to the overall financial loss and emotional distress experienced by victims.

To differentiate between legitimate communications and scams, it's crucial to stay vigilant. Real sellers or buyers seldom pressure you into scanning a QR code for receiving money. Pay attention to red flags such as repeated excuses for not using normal UPI transfers, or overly urgent requests to conclude a sale, which should raise immediate concerns. Keep in mind that legitimate transactions should follow standard procedures without additional considerable complications. Always inquire about the buyer’s payment method preferences and maintain friendly yet cautious communication. When interacting with payment links or QR codes, always remember that legitimate payment requests should not require you to deviate from conventional practices of using the UPI app directly for transactions.

Visual Intelligence:

BharatSecure's AI has identified this as a used in scams targeting Indian users.

Who Does QR Code Payment Trap on Resale Platforms Target?

General public across India

Red Flags — How to Identify QR Code Payment Trap on Resale Platforms

Buyer asks you to scan a QR code to 'receive' money
Repeated excuses for not using regular UPI transfer
Pressure to complete payment quickly
Pushy or inconsistent communication

What To Do If You Encounter QR Code Payment Trap on Resale Platforms

Report the incident immediately by calling the cybercrime helpline 1930 or visiting cybercrime.gov.in.
Document all interactions with the scammer, including screenshots of chats and transaction details.
Notify your bank's customer service to block your account and prevent further unauthorized transactions.
Change your UPI PIN and any passwords linked to your banking apps to secure your accounts.
Educate friends and family about this scam to raise awareness within your community.
Monitor your bank transactions regularly for any unauthorized activity following the incident.

How to Report QR Code Payment Trap on Resale Platforms in India

Call 1930 — National Cyber Crime Helpline (24x7)
File a complaint at cybercrime.gov.in
Contact your bank immediately if money was lost
Call RBI helpline: 14440 for banking fraud

Frequently Asked Questions

What to do if I shared my OTP in a UPI scam?: Immediately contact your bank's helpline (e.g., SBI at 1800-11-1109) to report the incident and ask for guidance to secure your account.
How can I identify a QR Code Payment Trap?: If a buyer asks you to scan a QR code to receive money instead of sending UPI directly, it's likely a scam. Legitimate transactions won't require QR scans for incoming payments.
How do I report this type of scam in India?: Report the scam to the Cybercrime helpline by calling 1930 or visiting cybercrime.gov.in. Also, inform your bank to freeze your account if necessary.
How can I recover money or protect my accounts after falling for this scam?: Contact your bank immediately to block unauthorized transactions and follow their instructions. Change your passwords and monitor your accounts for further suspicious activities.

Related Scams in India

Verify Any Suspicious Message

Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.