7 Ways to Stay Safe from UPI QR Code Scams
Scanning a QR code to pay has become a daily habit, at shops, petrol pumps, auto-rickshaws and even for donations. But fraudsters have also learned to misuse QR codes. The good news: a few simple checks can protect your money.
1. You scan a QR code only to PAY, never to RECEIVE
This is the most important rule. If someone sends you a QR code and says "scan this to receive money" or "scan to get your refund", it is a scam. Receiving money never needs a scan.
2. You never enter your UPI PIN to receive money
Your UPI PIN is used only to send money. If any app or person asks for your PIN to "receive" a payment, stop immediately.
3. Always check the name before paying
After scanning, your UPI app shows the name of the account holder. Make sure it matches the shop, person or organisation you want to pay. If the name looks different or strange, do not pay.
4. Watch out for stickers pasted over real QR codes
Fraudsters sometimes paste their own QR sticker over a shop's genuine one. If a QR looks freshly pasted, damaged or out of place, ask the shopkeeper before paying, and check the name shown in your app.
5. Confirm the payment with the shopkeeper
Many shops have a speaker that announces payments received. Wait for the confirmation, or show your payment screen, before leaving.
6. Be careful with QR codes on WhatsApp, SMS and social media
Fake "offers", "cashback", "KYC update" or "lottery" messages often include QR codes or links. Do not scan or click them. Banks never ask you to scan a QR code to update KYC.
7. Use only official apps and keep them updated
Download payment apps only from the Google Play Store or Apple App Store. Never install "screen sharing" apps at a stranger's request. These can let fraudsters see your PIN and OTP.
If you have been cheated
- Call the National Cyber Crime Helpline 1930 immediately. Acting fast improves the chance of stopping the money.
- File a complaint at cybercrime.gov.in.
- Inform your bank and the payment app's customer support, and take screenshots of the transaction.
Remember: Scan to pay · Check the name · Never share PIN or OTP.