{"id":18261,"date":"2025-07-30T12:26:01","date_gmt":"2025-07-30T06:56:01","guid":{"rendered":"https:\/\/learn.razorpay.in\/learn\/?p=18261"},"modified":"2026-01-05T13:55:42","modified_gmt":"2026-01-05T08:25:42","slug":"fake-qr-code-scams","status":"publish","type":"post","link":"https:\/\/razorpay.com\/learn\/fake-qr-code-scams\/","title":{"rendered":"Fake QR Code Scams: How They Work &#038; How to Stay Safe"},"content":{"rendered":"<p><span style=\"font-weight: 400;\">You\u2019ve just closed a deal online. The buyer insists on paying via UPI and sends you a QR code to scan. You expect money to be credited, but instead\u2014your bank balance drops. You\u2019ve been hit by a <\/span><b>fake QR code scam.<\/b><\/p>\n<p><span style=\"font-weight: 400;\">QR code payments have become second nature in India, making everyday transactions quick and seamless. In fact, UPI recorded over<\/span><a href=\"https:\/\/www.business-standard.com\/finance\/news\/upi-june-2025-transactions-slip-imps-fastag-aeps-npci-data-125070100331_1.html#:~:text=in%20June%20to-,18.4%20billion,-%2C%20compared%20to%20the\" target=\"_blank\" rel=\"noopener\"> <span style=\"font-weight: 400;\">18.4 billion<\/span><\/a><span style=\"font-weight: 400;\"> transactions in June 2025 alone, according to NPCI data. But this very convenience has opened the door to a growing threat. Fraudsters are now exploiting <\/span><b>QR codes<\/b><span style=\"font-weight: 400;\"> to deceive users into unknowingly transferring money. These scams are becoming a common type of UPI fraud, especially in peer-to-peer deals on platforms like OLX.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Fraudsters rely on one thing\u2014your habit of trusting QR codes. They know you\u2019ve scanned them at shops, delivery points, and petrol pumps without a second thought. That same trust is now being used against you.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">In this blog, you\u2019ll learn how <\/span><b>QR code scams<\/b><span style=\"font-weight: 400;\"> work, how to spot a suspicious QR code, and what to do if you\u2019ve been tricked into scanning one.<\/span><\/p>\n<h2><b>What Is a QR Code Scam?<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">A <\/span><b>QR code scam<\/b><span style=\"font-weight: 400;\"> is a type of fraud where scammers trick you into scanning a tampered or <\/span><b>fake QR code<\/b><span style=\"font-weight: 400;\"> to steal money or personal data. These codes often appear legitimate, but once scanned, they can trigger unauthorised payments or silently capture sensitive information\u2014especially when you expect to receive money or access a service.<\/span><\/p>\n<h2><b>How Fake QR Code Scams Work?<\/b><\/h2>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The fraudster generates a fake QR code and sends it to you\u2014usually over WhatsApp, chat, or during a call\u2014claiming it\u2019s to <\/span><i><span style=\"font-weight: 400;\">send<\/span><\/i><span style=\"font-weight: 400;\"> you money.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The scammer tells you, \u201c<\/span><b>Scan this QR code to receive the payment<\/b><span style=\"font-weight: 400;\">.\u201d It sounds easy and believable, especially if you\u2019ve sold something or are expecting money.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">When you scan the code, your UPI app opens a <\/span><i><span style=\"font-weight: 400;\">payment request<\/span><\/i><span style=\"font-weight: 400;\">, not a collection request. But you might not notice this because you&#8217;re expecting money, not paying it.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Believing it\u2019s part of receiving the money, you authorise the transaction. This actually sends your money to the scammer.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">In another version of the scam, scanning the QR code opens a fake website that looks like your bank or UPI app. If you enter your login details or OTP, the scammer captures them and uses them to steal your money.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">These <\/span><b>QR code payment scams<\/b><span style=\"font-weight: 400;\"> are commonly seen in online classified ads, doorstep deliveries, fake customer support chats, and refund-related calls.<\/span><\/li>\n<\/ol>\n<h2><b>Real-Life Examples in India\u00a0\u00a0\u00a0\u00a0\u00a0<\/b><\/h2>\n<h3><b>1.<\/b><b> Bengaluru Professor Loses \u20b963,000 While Selling a Washing Machine<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">A 30-year-old professor from the Indian Institute of Science, Bengaluru, listed his washing machine for sale on an online marketplace. A buyer contacted him, agreed to the listed price without any negotiation, and said he would send the payment via UPI.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Instead of directly transferring the money, the buyer sent a QR code and asked the professor to scan it to \u201creceive\u201d the amount. Trusting the process, the professor scanned the code\u2014and instantly lost \u20b963,000 from his bank account. The QR code was fake. It was designed to pull funds from his account, not send any.<\/span><\/p>\n<h3><b>2.<\/b><b> OLX Seller Loses \u20b91.9 Lakh After Scanning Multiple QR Codes<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Siddarth posted an ad on OLX to sell his air cooler for \u20b95,200. Within minutes, he received a call from someone claiming to be a used furniture dealer from Whitefield, Bengaluru. The buyer agreed to pay in advance and sent Siddarth a QR code worth \u20b95, asking him to scan it to confirm the payment process.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Siddarth scanned the code and received \u20b95. This was the bait. Next, the buyer sent a QR code for \u20b95,200. This time, when Siddarth scanned it, \u20b95,200 was debited from his account.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Still trusting the buyer, Siddarth followed instructions and scanned additional QR codes sent to \u201cresolve the issue.\u201d Each scan drained more money. By the time he realised it was a scam, over \u20b91.9 lakh had been withdrawn from his accounts.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The scammer then asked him to add a bank account as a beneficiary\u2014this finally triggered Siddarth\u2019s suspicion. He blocked his account and filed a complaint with the cybercrime helpline and local police.\u00a0<\/span><\/p>\n<h3><b>3.<\/b><b> Banking Executive\u2019s Family Loses \u20b946,000 While Selling an Inverter Online<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Even financially aware individuals are not immune. A 31-year-old vice president at an investment banking firm became a victim when his wife listed an inverter and battery for sale on OLX. A buyer approached them, posed as a genuine customer, and offered to pay via UPI.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">He sent a QR code saying it was needed to make the payment. Believing they were about to receive money, they scanned it. Instead of receiving funds, \u20b946,000 was withdrawn from their account. Just like the others, this <\/span><b>fake payment QR code<\/b><span style=\"font-weight: 400;\"> was set up to authorise outgoing payments rather than incoming transfers.<\/span><\/p>\n<h2><b>Red Flags to Spot a Fake QR Code<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">Spotting a <\/span><b>fake QR code scam<\/b><span style=\"font-weight: 400;\"> early can save you from financial loss. Here are some clear warning signs you should never ignore:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">If someone tells you to <a href=\"https:\/\/razorpay.com\/qr-code\/\">scan a QR code<\/a> to receive money, it\u2019s a red flag. In UPI, you never need to scan anything to get paid\u2014only to make a payment.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Be cautious if the QR code is sent by a stranger or appears on a random website, printed slip, or blurry image. Fraudsters often use screenshots or low-quality photos to avoid detection.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">If scanning a QR code opens a website, check the URL carefully. Avoid it if it looks misspelled, has random characters, or doesn\u2019t use \u201chttps\u201d (a sign of a secure connection).<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Scammers often create a sense of urgency. They may say things like, \u201cRefund it now,\u201d \u201cI\u2019ll lose my booking,\u201d or \u201cHelp me solve this quickly.\u201d This pressure is meant to stop you from thinking clearly.<\/span><\/li>\n<\/ol>\n<h2><b>How to Stay Safe from QR Code Scams?<\/b><\/h2>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Always verify before scanning a QR code:<\/b><span style=\"font-weight: 400;\"> If someone you don\u2019t know sends you a QR code, double-check their identity. Scammers often pretend to be genuine buyers, official customer support agents, or delivery personnel to gain your trust and convince you to scan a QR code.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Never scan a QR code to receive money:<\/b><span style=\"font-weight: 400;\"> UPI does not require scanning a code to receive a payment. If someone asks you to scan a QR code to get money, it\u2019s a strong sign that you are being targeted in a <\/span><b>fake QR code scam<\/b><span style=\"font-weight: 400;\">.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Use trusted payment apps with fraud protection: <\/b><span style=\"font-weight: 400;\">Always use reliable UPI apps that offer security features like real-time fraud alerts, secure login, and warnings for suspicious transactions<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Keep UPI PIN and notifications active: <\/b><span style=\"font-weight: 400;\">Ensure that every <a href=\"https:\/\/razorpay.com\/learn\/upi-transaction-charges\/\">UPI transaction<\/a> on your phone requires entering your PIN. Also, keep SMS and app notifications turned on so you are immediately alerted whenever money is sent or received from your account.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Scan only verified QR codes:<\/b><span style=\"font-weight: 400;\"> Only scan QR codes that are clearly displayed at physical stores or generated within official apps. Never scan QR codes sent as images, screenshots, or links by strangers\u2014they are often used in <\/span><b>QR code fraud<\/b><span style=\"font-weight: 400;\">.<\/span><\/li>\n<\/ol>\n<h2><b>What to Do If You Scanned a Fake QR Code?<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">If you scanned a suspicious QR code, <\/span><b>do not enter your <a href=\"https:\/\/razorpay.com\/learn\/what-is-a-upi-pin\/\">UPI PIN<\/a><\/b><span style=\"font-weight: 400;\"> or approve any payment. Simply scanning a QR code doesn\u2019t transfer money\u2014it&#8217;s the PIN that authorises it.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">If you already made a payment, follow these steps immediately:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Call your bank or the customer care of your UPI app without delay. Request them to freeze or reverse the transaction if possible.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Ask the bank to temporarily block your UPI ID or linked card to prevent further misuse.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Report the fraud at <\/span><a href=\"http:\/\/cybercrime.gov.in\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">cybercrime.gov.in<\/span><\/a><span style=\"font-weight: 400;\"> or call 1930 \u2014 the official helpline for online scams.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Keep screenshots of the QR code, chat messages, transaction history, and anything else related to the scam. This will help during investigation and recovery.<\/span><\/li>\n<\/ol>\n<h2><b>Conclusion<\/b><\/h2>\n<p><b>QR code scams<\/b><span style=\"font-weight: 400;\"> work because they create confusion and pressure you to act quickly without thinking. Fraudsters often use urgency\u2014like saying it\u2019s a refund, delivery issue, or payment confirmation\u2014to trick you into scanning a code without checking what it actually does.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Always remember: <\/span><b>you never need to scan a QR code to receive money.<\/b><span style=\"font-weight: 400;\"> If someone tells you otherwise, it&#8217;s likely a scam.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Stay alert whenever you\u2019re scanning a code\u2014whether in a public place, during a customer service chat, or while dealing with someone online. It only takes a few seconds to double-check and avoid a costly mistake.<\/span><\/p>\n<p><b>Think before you scan\u2014your caution is your best protection.<\/b><\/p>\n<h2><b>FAQs<\/b><\/h2>\n<h3><b>Q1. Can scanning a QR code result in money being deducted?<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Yes. If the QR code is set up to request payment, scanning it with your UPI app and entering your PIN will result in money being transferred from your account.\u00a0<\/span><\/p>\n<h3><b>Q2. How can I know if a QR code is fake?<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">A QR code may be fake if it comes from an unknown source, asks you to scan to receive money, or opens a suspicious or misspelled link. Always verify the sender and check the URL carefully.<\/span><\/p>\n<h3><b>Q3. Is it safe to scan public QR codes?<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Not always. Scammers can replace real QR codes with fake ones in public places. Always check for tampering before scanning.<\/span><\/p>\n<h3><b>Q4. What should I do if I accidentally scanned a scam QR code?<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Immediately report it to your bank or UPI app support, block your account if needed, and change your UPI PIN. Also, file a complaint at<\/span> <span style=\"font-weight: 400;\">cybercrime.gov.in<\/span><span style=\"font-weight: 400;\">.<\/span><\/p>\n<h3><b>Q5. Are QR code scams increasing in India?<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Yes, <\/span><b>QR code frauds<\/b><span style=\"font-weight: 400;\"> are rising in India due to the widespread use of UPI. Scammers commonly target users through online sales platforms, messaging apps, and fake customer support chats.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>You\u2019ve just closed a deal online. The buyer insists on paying via UPI and sends you a QR code to scan. You expect money to be credited, but instead\u2014your bank balance drops. You\u2019ve been hit by a fake QR code scam. QR code payments have become second nature in India, making everyday transactions quick and<\/p>\n","protected":false},"author":151156580,"featured_media":18350,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1387],"tags":[4486],"class_list":{"0":"post-18261","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-payments","8":"tag-fake-qr-code-scams"},"_links":{"self":[{"href":"https:\/\/learn.razorpay.in\/learn\/wp-json\/wp\/v2\/posts\/18261","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/learn.razorpay.in\/learn\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/learn.razorpay.in\/learn\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/learn.razorpay.in\/learn\/wp-json\/wp\/v2\/users\/151156580"}],"replies":[{"embeddable":true,"href":"https:\/\/learn.razorpay.in\/learn\/wp-json\/wp\/v2\/comments?post=18261"}],"version-history":[{"count":3,"href":"https:\/\/learn.razorpay.in\/learn\/wp-json\/wp\/v2\/posts\/18261\/revisions"}],"predecessor-version":[{"id":18646,"href":"https:\/\/learn.razorpay.in\/learn\/wp-json\/wp\/v2\/posts\/18261\/revisions\/18646"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/learn.razorpay.in\/learn\/wp-json\/wp\/v2\/media\/18350"}],"wp:attachment":[{"href":"https:\/\/learn.razorpay.in\/learn\/wp-json\/wp\/v2\/media?parent=18261"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/learn.razorpay.in\/learn\/wp-json\/wp\/v2\/categories?post=18261"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/learn.razorpay.in\/learn\/wp-json\/wp\/v2\/tags?post=18261"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}