QR Code Scams — When Scanning Costs You Money
A QR code is just a way of typing in a UPI ID faster — it carries the same risks as any payment request, dressed up to look automatic and safe.
What this scam looks like
Someone selling an item online, or even in person, asks you to "just scan this QR code to receive your payment." You scan it, your UPI app opens, and you're asked to enter your PIN — which actually sends money to them instead of receiving anything. The QR code itself didn't do anything malicious; it simply pre-filled a payment request that you then approved.
Why it works
QR codes feel technical and automatic, which makes people trust them more than they should. In reality, a QR code for UPI is just a shortcut for entering someone's UPI ID and an amount — scanning one to "receive" money makes no logical sense, since receiving money never requires you to enter your PIN at all.
Red flags to watch for
- Being asked to scan a QR code in order to receive a payment
- Your UPI app asking for a PIN right after scanning a code from someone paying you
- QR codes shared over WhatsApp or SMS from unfamiliar numbers, especially with urgency attached
- Pasted-over or sticker QR codes at shops or stalls that look tampered with
How to protect yourself
You never need to scan anything to receive money on UPI — the person paying you simply needs your UPI ID or phone number. If a "buyer" insists you scan a code to get paid, that alone is a strong warning sign. At physical shops, check that a QR code sticker looks original and isn't pasted over another one.
If this has already happened to you
Head straight to our "I've Been Scammed" page and follow the steps in order — acting quickly gives your bank the best chance to help.
This article is general awareness information, not legal advice. See our disclaimer for details.