QR codes have become a part of everyday life. From making UPI payments and ordering food to paying parking fees and accessing restaurant menus, people scan QR codes without giving them a second thought. Unfortunately, cybercriminals are now exploiting this habit through a growing fraud known as the QR code scam or "quishing" (QR phishing).
Knowing how these scams work can help you avoid financial loss and protect your personal information.
How does a QR code scam work?
Fraudsters place fake QR code stickers over genuine ones or send QR codes through WhatsApp, SMS, email, or social media. Once scanned, the code may:
-
Redirect you to a fake banking or UPI website.
-
Ask you to enter your debit card or banking details.
-
Install malicious software on your phone.
-
Trick you into approving a fraudulent payment.
-
Steal login credentials for your online accounts.
Because QR codes hide the actual website address, many users don't realize they're visiting a fake page.
6 warning signs of a fake QR code
Watch out for these red flags before scanning:
-
A QR sticker pasted over another QR code.
-
Requests to "receive money" by scanning a QR code.
-
QR codes sent by unknown contacts.
-
Links asking you to enter UPI PIN or banking credentials.
-
Poor-quality or tampered QR stickers.
-
Messages claiming you've won a prize or refund and asking you to scan a code.
Remember this important rule
Scanning a QR code should never require you to enter your UPI PIN just to receive money.
If you're asked to enter your PIN after scanning a QR code for a refund, prize, or payment collection, it's likely a scam.
How to protect yourself
Follow these safety tips whenever you scan a QR code:
-
Verify the QR code before scanning.
-
Check the website address before entering any details.
-
Use only trusted payment apps.
-
Never share OTPs or UPI PINs.
-
Keep your banking apps updated.
-
Enable transaction alerts for all bank accounts.
-
Avoid scanning QR codes from unknown messages.
What should you do if you've scanned a suspicious QR code?
If you think you've fallen victim to a QR code scam:
-
Disconnect your phone from the internet if you downloaded anything suspicious.
-
Change passwords for important accounts immediately.
-
Contact your bank if you entered financial information.
-
Block your UPI account or card if necessary.
-
Report the incident through the National Cyber Crime Reporting Portal or the cybercrime helpline (1930) as quickly as possible.
Why QR scams are increasing
Digital payments have become faster and more convenient than ever, making QR codes a common part of daily life. Cybercriminals take advantage of this familiarity, knowing that many people scan codes without checking where they lead.
The bottom line
A QR code may look harmless, but scanning the wrong one can expose your banking details or personal information. Before scanning any QR code, take a few seconds to verify its source and destination. That small precaution can help protect you from online fraud and financial loss.
