QR Sticker Swap Shop Scam
Scammers paste their own QR code over a shop's real one, so customers pay the wrong account and the shopkeeper is never paid.
Many small shops, petrol pumps, parking areas and street stalls display a printed QR code for payments. A scammer can quietly stick a different code on top of it. Customers scan the code, see a payment page, and pay without noticing that the name on the screen is not the shop's. The shop owner sees no credit and the customer believes they paid in full.
How the scam works
The scammer visits the shop or parking area when nobody is watching the counter. They print a QR code linked to their own account on a sticker the same size as the real one and paste it on top, or on a standee next to the till. The trick takes a few seconds, and the new sticker is often placed on a laminated board so it looks original.
Customers keep paying as usual. Because many UPI apps show the receiver's name in a small line on the confirmation page, few people stop to read it. The shopkeeper hears no sound from a sound box or sees no credit in their app, but on a busy day they may assume the payments are delayed and keep handing over goods or services.
The money from each customer lands in the scammer's account and is withdrawn or moved on within minutes. The shop owner discovers the problem after counting less than expected, and customers believe they have paid in full. The scammer may revisit and replace the sticker several times, using different accounts each time so that none is easy to trace.
An example of what you may see
Example only: A tea stall owner says, 'My sales are down but the stall is always full.' A customer paid Rs 120 and the screen showed a receiver name 'S Enterprises' instead of the stall's name. The printed code looked slightly crooked and its edge had a small bubble of glue. Nobody checked the receiver name before approving because the line of customers was long and everyone was in a hurry.
This example is written for illustration. Real messages change their wording, names and links all the time.
Red flags
- A QR sticker is pasted over or beside the original code.
- The receiver name on the pay screen is not the shop's name.
- The code looks crooked, bubbly or newer than the board around it.
- Your sound box or app does not show credits for payments that customers say they made.
- A stranger placed a standee or poster near the counter.
- The same shop gets complaints of 'payment not received' repeatedly.
What to do right now
- Check the receiver name on the payment page before you press pay.
- As a shop owner, inspect your QR code every morning and use a sealed or engraved code.
- Ask customers to pay by typing your UPI ID or confirm the name aloud.
- Remove any sticker you did not place and keep it as evidence.
- Warn neighbouring shops and customers once you find a fake sticker.
If you already paid or shared a code
- Call 1930 as soon as you realise you paid the wrong account and give the transaction ID.
- Tell your bank through the number on your card or passbook.
- Report at https://cybercrime.gov.in with a photo of the fake sticker and the payment screen.
- Shop owners should also note the time window when the sticker was in place.
National Cyber Crime Helpline: 1930. Report online at cybercrime.gov.in. Do it fast: the sooner your bank is told, the better the chance that money can be held.
Where this scam shows up
Read how it looks on each channel:
How Safeavio helps
Safeavio's QR check lets you scan a code and see where it goes before you pay or open it, which can help you notice a code that does not match the shop. Money Shield reminds you to confirm the receiver name before you pay. Safeavio cannot see a physical sticker and cannot tell you whether a UPI account belongs to the shop.
Check it before you tap or pay
Safeavio Sentinel is a made-in-India Android app: paste a message or link, or scan a QR code, and get a plain verdict with the reasons. It helps you spot a scam; it does not promise to stop every one.
Download for AndroidWhat the app does
Google Play listing: coming soon. Today the signed APK is on safeavio.com/download. Android 7.0 or later.
Questions people ask
How can I check a shop's QR code before paying?
Scan it with your UPI app and read the receiver name on the pay screen before entering your PIN. It should match the shop's name or a name the owner confirms. If it does not, stop and ask the shopkeeper.
What should a shopkeeper do to protect the QR code?
Place the code where you can see it, check it every day, use a protected holder or sound box, and look at your own app for credits during the day. Tell customers to confirm the name shown before paying.
Does the sticker scam hack my bank account?
No. Nothing is hacked. The scammer simply gets customers to pay into the wrong account. That is why the receiver name on the confirmation screen is the best check, and why shops should verify credits themselves.