QR Code Swaps at Merchant Terminals

मर्चेंट टर्मिनलों पर क्यूआर कोड स्वैप

INDIA — By BharatSecure Threat Intelligence Team ·

Verdict: Dangerous | Risk Score: 7/10 | Severity: High

Category: UPI/Physical

How QR Code Swaps at Merchant Terminals Works

  1. Scammers physically replace legitimate merchant QR codes with their own fraudulent ones.
  2. Customers scan the fake QR code to make payment for goods/services.
  3. Payment is diverted to the scammer's account instead of the merchant's.

How This Scam Works — Detailed Explanation

In India, UPI payments have become the preferred way to pay at shops, restaurants, and other merchants. However, this popularity has also attracted fraudsters who exploit QR code technology. In a scam called QR Code Swaps at Merchant Terminals, fraudsters physically replace the genuine merchant’s UPI QR code with a fake one linked to their own bank account. When a customer scans the fake code to pay, the money goes directly to the fraudster instead of the merchant.

Scammers typically approach busy or crowded outlets such as small stores, street vendors, or even popular food stalls. They quickly swap the original QR code sticker with a tampered or poorly printed fake version. Because many customers rely on the QR code without verifying any details, they unknowingly send payments to the fraudsters. Sometimes the fake QR code may be partially covered or look out of place, but these signs can be subtle and easy to miss.

After scanning, victims may notice their UPI app shows an unusual or unfamiliar payee name before confirming the payment, but in the rush, most proceed. Because the merchant does not immediately receive any payment confirmation on their device, suspicions eventually arise. However, by then the scammers have already collected the money and disappeared. Victims find it hard to retrieve their money because the transaction is authorized by their own UPI app and the fraud accounts are often quickly closed or changed.

This scam exploits the trust Indians place on UPI payments and the ease of scanning QR codes alongside crowded shops. Fraudsters may also use WhatsApp or phone calls posing as the merchant to gain trust or ask for payment again, adding pressure on victims. Given the rise of such scams in India, especially with the growing number of digital payments, customers must stay alert and verify every payment carefully before confirmation.

Who Does QR Code Swaps at Merchant Terminals Target?

Shoppers making UPI payments at physical stores, street vendors, and small businesses.

Red Flags — How to Identify QR Code Swaps at Merchant Terminals

  • QR code looks tampered with, poorly printed, or partially covered.
  • Payment confirmation not immediately received by the merchant.
  • Unfamiliar payee name appearing before payment confirmation on the UPI app.

What To Do If You Encounter QR Code Swaps at Merchant Terminals

  1. Inspect the merchant’s QR code carefully for any signs of tampering, poor printing, or partial covering before scanning.
  2. Verify the payee name displayed on your UPI app matches the merchant’s official name before confirming payment.
  3. Ask the merchant to confirm if they received your payment and show you the confirmation on their device immediately after payment.
  4. Report suspicious QR codes or failed payments to your bank’s customer service and the National Payments Corporation of India (NPCI) through their helpline or app.
  5. Avoid sending money if the transaction confirmation is delayed or if the payee name looks unfamiliar; double-check with the merchant before proceeding.

How to Report QR Code Swaps at Merchant Terminals in India

  • Call 1930 — National Cyber Crime Helpline (24x7)
  • File a complaint at cybercrime.gov.in
  • Contact your bank immediately if money was lost
  • Call RBI helpline: 14440 for banking fraud

Frequently Asked Questions

What is QR Code Swaps at Merchant Terminals?
Dangerous: QR Code Swaps at Merchant Terminals. Fraudsters swap merchant QR codes with fake ones, diverting UPI payments to their accounts. Check QR codes carefully in India 2026.
How does QR Code Swaps at Merchant Terminals work?
Scammers physically replace legitimate merchant QR codes with their own fraudulent ones. Customers scan the fake QR code to make payment for goods/services. Payment is diverted to the scammer's account instead of the merchant's.
How to protect yourself from QR Code Swaps at Merchant Terminals?
Inspect the merchant’s QR code carefully for any signs of tampering, poor printing, or partial covering before scanning. Verify the payee name displayed on your UPI app matches the merchant’s official name before confirming payment. Ask the merchant to confirm if they received your payment and show you the confirmation on their device immediately after payment. Report suspicious QR codes or failed payments to your bank’s customer service and the National Payments Corporation of India (NPCI) through their helpline or app.
How to report QR Code Swaps at Merchant Terminals in India?
Report to cybercrime.gov.in or call 1930 (National Cyber Crime Helpline). You can also contact your local police station's cyber cell.

Related Scams in India

Verify Any Suspicious Message

Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.