OLX Buyer Sends a QR Code to Receive Payment
A buyer on OLX or Facebook Marketplace says 'scan this QR to get paid' and your account is debited instead. Learn why you never scan to receive.
You list a sofa, a bike or a second-hand phone for sale. A buyer responds in minutes, accepts your price without bargaining, and says he is far away so he will pay online. He sends a QR code, or a collect request, and asks you to scan it to receive the money. Instead of receiving anything, your account is debited. The key rule is simple: to receive money you never enter a PIN and never scan.
How the scam works
The scammer searches listings and picks items priced reasonably. He messages straight away and moves the chat to WhatsApp, where he is harder to trace. He agrees to the price without any haggling, which feels like a lucky sale, and says he will arrange a pick-up person after payment. He claims to have an urgent posting or business trip.
Then he tries to 'send the advance'. He shares a QR code or a payment link and says it is a special receiving code. In some versions he sends a small amount first to build trust, then asks you to scan a second code to receive the 'balance'. When you scan and enter your UPI PIN, the app is actually authorising a payment from your account.
The payoff is immediate money from your account. If you complain that no money arrived, he says the app is slow and sends another code, trying a second or third debit. Some sellers lose several thousand rupees within minutes before they notice that the bank messages say 'debited' and not 'credited'. Victims often notice only after the third attempt, when their daily UPI limit or balance runs out and the bank sends a low-balance alert.
An example of what you may see
Example chat (invented): 'Hi, I like the sofa, Rs 18,000 final, no bargaining. I am in another city so I will send an advance of Rs 2,000 now. Scan this code and enter your PIN to receive it.' Your bank SMS then reads 'Rs 2,000 debited'. He writes, 'Failed, scan again, bank server issue.' He then sends a screenshot showing 'payment sent' that is edited, and asks for your address so his 'brother' can collect the item the same evening.
This example is written for illustration. Real messages change their wording, names and links all the time.
Red flags
- The buyer accepts your price instantly and never asks about the condition of the item.
- You are told to scan a QR code or enter a UPI PIN in order to receive money.
- The chat is moved off the marketplace to WhatsApp within a few messages.
- The buyer says he cannot visit and will send a courier or 'army' person later.
- A payment fails and he urges you to try again immediately with a new code.
- Your bank messages show 'debited' while he insists money is arriving.
What to do right now
- Stop at once and do not enter your UPI PIN for any 'receive' request.
- Read your bank SMS carefully: 'debited' means money left, 'credited' means money came in.
- Share your UPI ID or account number for receiving, never a QR code you have been sent.
- Meet buyers in person in a public place and check the payment in your app before handing over goods.
- Report the buyer's profile on the marketplace.
If you already paid or shared a code
- Call 1930 immediately and report at cybercrime.gov.in with the UPI transaction ID.
- Tell your bank through its official app or the number on your card.
- Block the buyer and save the chat and QR image before you do.
- Do not scan any further codes, even if the buyer says it will 'reverse' the payment.
National Cyber Crime Helpline: 1930. Report online at cybercrime.gov.in. Do it fast: the sooner your bank is told, the better the chance that money can be held.
Where this scam shows up
Read how it looks on each channel:
How Safeavio helps
Use QR check in Safeavio Sentinel to scan a QR code and see where it leads before you pay or open anything. It helps you notice that a code which should receive money is really asking you to pay. Money Shield explains in plain words that you never need a PIN to receive money. Safeavio cannot stop you from entering a PIN or recover a payment that has left your account.
Check it before you tap or pay
Safeavio Sentinel is a made-in-India Android app: paste a message or link, or scan a QR code, and get a plain verdict with the reasons. It helps you spot a scam; it does not promise to stop every one.
Download for AndroidWhat the app does
Google Play listing: coming soon. Today the signed APK is on safeavio.com/download. Android 7.0 or later.
Questions people ask
Do I ever need to scan a QR code to receive money?
No. A UPI PIN is only for sending money. If someone asks you to scan or enter a PIN to receive a payment, it is a debit request, and you should stop. Remember that your UPI PIN is only for sending money from your account, so an entry of the PIN always means you are authorising a payment.
What is the safest way to get paid on a marketplace?
Meet in person and check that the credit message appears in your own bank app before you hand over the item. Share only your UPI ID or number when asked, never a code you are given.
Why does the buyer send a small amount first?
It builds trust and makes the later 'balance' request look normal. Sometimes it is a genuine small credit that is used to make you relax before a larger debit request. Treat any later 'balance' request as a warning, and stop even if the first amount was real.