Safe QR code payment habits for shops, bills and parking
Build simple habits for scanning QR codes: scan to pay not to receive, check the name, and watch for stickers on top of real codes.
QR payments are quick and common in India, from tea stalls to parking. Scammers use QR codes too, by sticking their own code over a real one, or by sending a code and saying scan it to receive money. A few habits make scanning safe: check the name, check the amount and never scan to receive.
Steps
- Remember: you scan only to pay. You never need to scan a QR code or enter a PIN to receive money. If someone says scan this to get your refund or prize, it is a scam. Stop and walk away.
- Check the payee name. After scanning, your UPI app shows the name of the person or shop. Compare it with the shop you are in. A different or odd name is a warning, so ask before you pay.
- Look for stickers over the code. At shops and parking spots, check that the QR is not a sticker placed over another. Ask for the shop's printed code or pay through the app of the place.
- Check the amount yourself. Type the amount yourself, or read it carefully if it is filled in. Look at the final screen before entering your PIN. Menu names differ slightly on Samsung, Xiaomi, Vivo, Oppo, Realme and OnePlus phones.
- Be careful with codes in messages. Do not scan QR codes that arrive in WhatsApp, email or posters from unknown people, especially for jobs, offers or refunds. Treat them like links and verify first.
- Use a small balance and alerts. Keep a small balance in the account linked to UPI and keep payment alerts on. If you spot an unknown debit, tell your bank and call 1930 straight away.
Menu names differ a little between phone makers and Android versions. If you cannot find a setting, open Settings and use the search box.
Why it matters
QR codes hide the destination, so you cannot judge them by looking. That makes them useful for scammers who swap a sticker or send a code with a made-up story. The payee name and the rule that you scan only to pay catch most of these tricks within seconds. Make both a habit at every shop, including ones you visit daily.
Watch out for
- Never enter your UPI PIN to receive money.
- A QR code in a message about a refund is a trap.
- Check parking and fuel stalls for pasted stickers.
- Do not rush because someone is waiting behind you.
How Safeavio helps
Safeavio's QR check lets you scan a code and see where it goes before paying or opening it, and Money Shield gives a Verify before you pay checklist. These help you spot problems. They cannot confirm that a shop is honest and cannot recover money.
Check it before you tap or pay
Safeavio Sentinel is a made-in-India Android app: paste a message or link, or scan a QR code, and get a plain verdict with the reasons. It helps you spot a scam; it does not promise to stop every one.
Download for AndroidWhat the app does
Google Play listing: coming soon. Today the signed APK is on safeavio.com/download. Android 7.0 or later.
Questions
Can a QR code steal money by being scanned?
Scanning alone usually does not move money. Harm comes when the code opens a fake payment page, links to a harmful site or asks you to enter your PIN. Check where a code leads before continuing.
Why does a refund need me to scan a QR code?
It does not. A real refund arrives in your account without you scanning anything or entering a PIN. Anyone who asks you to scan or approve a request to receive money is trying to take it.