Shop Counter QR Sticker Swap Targeting Small Merchants
Scammers paste their own payment QR over a shop's real code so customers pay the wrong account. Shopkeepers and customers should check the name.
A small shop displays a payment QR on the counter. One evening a stranger sticks a copy of his own QR over it and walks away. For hours, customers scan and pay, seeing a successful message, but the money goes to the scammer. The shopkeeper notices only when his totals do not match. The trick works because customers rarely read the payee name, and shopkeepers rarely check their QR boards.
How the scam works
The set-up is a quick visit. The scammer, acting like a customer, buys a small item and places a printed QR sticker over the shop's code, or leaves a new standee on the counter that looks like the old one. The code he uses belongs to an account under his control. The sticker uses the same colours and style as the shop's board, so a quick glance shows nothing unusual.
The pressure is the rush of a normal day. Customers scan and pay in seconds, and the payment app shows a success note. The payee name may be a person or a vague business name, but few people read it. The shopkeeper sees notification sounds on his own soundbox only if it is linked to his account, which is why some scammers target shops without such alerts or turn up when staff are busy.
The payoff is every payment made to the scammer's account until the swap is found, which can be a day or more. Customers believe they have paid, and the shop sees no money, which leads to disputes. In some cases the scammer also adds a note 'new QR, old one not working' to explain the change. Recovering money is difficult, since each payment was made willingly by the customer.
An example of what you may see
Example scene (invented): A customer scans the code on the counter, pays Rs 480 for groceries and shows the success screen. The shopkeeper's soundbox stays silent. When he checks his bank app, no credit has arrived. Looking closer, he finds a thin sticker with a different code pasted over his own, and the payee name that the customer saw was an unfamiliar personal name. The next day another shopkeeper nearby reports the same problem and a thin sticker on his board too.
This example is written for illustration. Real messages change their wording, names and links all the time.
Red flags
- A QR board looks newer, thicker or slightly misaligned.
- The soundbox or app does not confirm a payment the customer says was made.
- The payee name shown to customers does not match the shop's name.
- A stranger spent time at the counter and touched the board.
- A note on the board says 'new QR, old not working'.
- Totals for the day do not match the customer payments.
What to do right now
- Check the QR board each morning and evening for stickers or changes.
- Prefer a soundbox or app alert linked to your own account for each payment.
- Ask customers to confirm that the payee name matches your shop.
- Cover the board with a protective film or place it where staff can see it.
- Report suspected swaps to your bank and the police.
If you already paid or shared a code
- If you or a customer paid the wrong account, call 1930 and report at cybercrime.gov.in with the UPI reference.
- Tell your bank through its official app so the receiving account can be noted.
- Keep a photo of the sticker, the shop's board and the transaction list.
- Replace the QR board with a fresh one from your own bank's app.
National Cyber Crime Helpline: 1930. Report online at cybercrime.gov.in. Do it fast: the sooner your bank is told, the better the chance that money can be held.
Where this scam shows up
Read how it looks on each channel:
How Safeavio helps
QR check in Safeavio Sentinel scans a code and shows where it goes before you pay, which helps customers and shopkeepers notice a payee that does not match the shop. Money Shield explains what to verify before paying. Safeavio cannot detect a sticker on a physical board, cannot confirm that payments arrived and cannot recover money sent to the wrong account.
Check it before you tap or pay
Safeavio Sentinel is a made-in-India Android app: paste a message or link, or scan a QR code, and get a plain verdict with the reasons. It helps you spot a scam; it does not promise to stop every one.
Download for AndroidWhat the app does
Google Play listing: coming soon. Today the signed APK is on safeavio.com/download. Android 7.0 or later.
Questions people ask
How can customers avoid paying the wrong account?
Read the payee name in your payment app before you enter your PIN, and compare it with the shop's name. If it looks unrelated, ask the shop to show a different code or pay in cash.
How can a shopkeeper protect his QR board?
Check it often, use a soundbox linked to your account for instant credit alerts, cover it with a clear film and place it where it is visible to you. Replace the board if anything looks tampered with.
Who is responsible when money goes to the wrong account?
This is not legal advice. In practice, report quickly to 1930 and cybercrime.gov.in, tell your bank and keep evidence. Early reports give the bank the best chance to act. Keep a photo of the board and the transactions to support your complaint.