Society and RWA Maintenance App Scam
A fake message in the society group changes the maintenance QR or asks residents to install an RWA app. See how dues are diverted and what to check.
Residents in an apartment complex pay monthly maintenance through a UPI QR or a society app. A fake message in the group says the account has changed and shares a new QR, or says everyone must install a new 'society app' to avoid a fine. The money goes to a stranger and the app reads the resident's messages. Because it appears inside a trusted neighbours' group, few people question it.
How the scam works
The scammer joins the resident group by pretending to be a new tenant, or takes over a committee member's WhatsApp. He posts in the same style as the real admin, with a 'notice' image and a new QR code, saying the old bank account is under audit and the new one must be used from this month.
Pressure comes from a late fee and the dates the dues are normally paid. Residents see others thanking the 'admin' (often fake accounts), which makes it look normal. For the app trick, an APK or a link is shared with the message that all residents must register their flat by Sunday to avoid penalty. Some also remove the real admin from the group so that questions cannot be raised.
The payoff is a whole month of maintenance from many flats landing in one fake account, plus access to phones through the app. The real committee notices only when the reconciliation does not match, by which time the money is gone and residents argue about who paid whom. Once the real treasurer finds the gap, arguments among residents often take longer than the police complaint.
An example of what you may see
Example message (invented): 'Dear residents, our society bank account is under audit. From this month please pay maintenance to the new QR attached. Last date 5th, Rs 200 late fee after that. Also install the new Society Connect app, link below, to register your flat.' A few minutes later other numbers reply 'Paid, thanks sir' to make it look normal. The message ends: 'Do not pay on the old QR, it will be blocked.'
This example is written for illustration. Real messages change their wording, names and links all the time.
Red flags
- A changed maintenance account announced only in a chat group.
- A new QR code shared as an image, with no signed notice from the committee.
- An app or APK link that all residents 'must' install.
- The new account holder is a person, not the society's registered name.
- A late fee threat in the first message.
- The sender is a new member or an admin whose number recently changed.
What to do right now
- Do not pay the new QR. Ask the committee in person or on a known number.
- Check the beneficiary name in your UPI app before paying any maintenance.
- Ask for a signed notice or a bank letter if the account has changed.
- Do not install any app shared in a chat without checking with the secretary.
- Tell the committee so they can warn everyone and remove the sender.
If you already paid or shared a code
- Call 1930 and report at cybercrime.gov.in with the QR and payment id.
- Tell your bank on the number printed on your card and ask about holding the transfer.
- Inform the committee in writing so other residents can check their payments.
- If you installed an app, uninstall it and change banking passwords from a clean phone.
National Cyber Crime Helpline: 1930. Report online at cybercrime.gov.in. Do it fast: the sooner your bank is told, the better the chance that money can be held.
Where this scam shows up
Read how it looks on each channel:
How Safeavio helps
Safeavio's QR check can show where a new maintenance QR leads before you pay, and Money Shield's checklist reminds you to confirm the receiver's name. The scam check reads a pasted notice for pressure and fees, and the Phone scan lists apps from outside a store. It cannot verify the society's bank details, so the committee's written confirmation remains the real check.
Check it before you tap or pay
Safeavio Sentinel is a made-in-India Android app: paste a message or link, or scan a QR code, and get a plain verdict with the reasons. It helps you spot a scam; it does not promise to stop every one.
Download for AndroidWhat the app does
Google Play listing: coming soon. Today the signed APK is on safeavio.com/download. Android 7.0 or later.
Questions people ask
How do I confirm a changed society account?
Ask the secretary or treasurer in person or by calling a number you already know. A genuine change is announced with a signed notice and the registered society name as the receiver. A phone call on a number you already know is enough.
Should I install an app because the group admin asks?
Not until the committee confirms it on a separate channel and the app comes from an official store. A forwarded APK is a red flag, even in a trusted group. Ask the secretary before tapping the link.
What if the payment name looks personal?
Do not pay. A society collects dues in its own registered account. A personal name suggests the money will go to an individual. Check the name shown before every payment, because a personal name in place of the society name is the clearest sign of a fake QR.