What it looks like
"I have sent the Rs 8,000 for your sofa. Just scan this QR code and enter your UPI PIN to receive it."
How the qr code payment scam works
- You sell something online, ask for a refund, or see a QR code in a public place.
- A 'buyer' or 'support agent' sends a QR code on WhatsApp and says scanning will credit your account.
- You scan and the app shows a payment screen with an amount.
- You enter your PIN thinking it is to receive money, but it pays the scammer.
- In other versions, a fake QR code sticker on a parking meter, poster or shop counter leads to a fake site that steals card or login details.
- They often repeat the trick with a larger amount, saying the first one 'failed'.
Red flags
- Anyone saying 'scan this to receive money'.
- Your payment app shows 'Pay' or a debit amount when you expected to receive.
- A buyer who agrees to your price without questions and is in a hurry.
- A QR code sticker placed over another one, or in an unexpected place.
- A QR code in an unexpected email or text asking you to act urgently.
- The link behind the QR code is misspelled or not the real company website.
What to do
- Never enter your UPI PIN to receive money. PIN is only for paying.
- Check the name and amount on the screen before approving any payment.
- Before opening a QR link, check the web address carefully.
- If money was taken, call your bank and block UPI immediately.
- In India, call 1930 at once and file a complaint at cybercrime.gov.in. Fast reporting gives the best chance to freeze the money.
- US: ReportFraud.ftc.gov. UK: Report Fraud (formerly Action Fraud) on 0300 123 2040.
Protect your family
Teach everyone one simple rule: 'PIN means money goes OUT.' Ask elders and teens to call you before scanning any QR code that a stranger sends.
Also known as: scan to receive scam, fake QR code, quishing
Questions people ask
Do I need to scan a QR code to receive money on UPI?
No. To receive money, you only share your UPI ID or show your own QR code. Scanning someone else's code and entering your PIN sends money out.
Can scanning a QR code hack my phone?
Scanning usually opens a link. The danger is what you do next: entering a PIN, card details or logins on a fake page, or installing an app it asks for.
I lost money by scanning a QR code. Can I get it back?
Act fast. Call your bank to block UPI, then call 1930 in India and file at cybercrime.gov.in so the money can be frozen.