Fraudster sends a merchant an AI-edited QR code — customer payments silently go to the scammer
A fraudster uses AI image-editing to replace the payment destination in a merchant's UPI QR code while keeping the displayed shop name. The doctored QR is returned to the shopkeeper — every customer who scans it pays the fraudster.
Also known as: AI QR code tampering, fake merchant QR scam, UPI QR swap fraud, QR code image editing fraud India
Already happened to you? Do this in the next few minutes
Call 1930 now- 1 Call 1930 — the national cyber-crime helpline — right now. The sooner you report, the better the chance of freezing the money before it moves.
- 2 Call your bank to freeze the account and block the card immediately. Use the number printed on your card, never a number from the message or caller.
- 3 File a report at cybercrime.gov.in and keep every message, screenshot, and transaction ID.
What to do right now
- 1 Merchants: scan your own displayed QR code with a second phone and verify the UPI ID and merchant name in the payment confirmation screen match your bank account — do this weekly
- 2 Never accept a QR code image sent by anyone over WhatsApp, email, or SMS — always generate QR images yourself through your bank's official app or payment gateway
- 3 If customers report successful payments that never arrive, take down the QR immediately and report to your bank and cybercrime police
- 4 For customers who paid to the wrong merchant: raise a UPI dispute with your bank immediately; cross-account UPI redirects are recoverable if reported within 24 hours
- 5 Report at https://cybercrime.gov.in or call 1930 (national cyber helpline).
Red flags
- ⚠ Received a WhatsApp or email with a 'corrected' or 'updated' version of your own QR code — verify any incoming QR by scanning it yourself to check where payment goes
- ⚠ Customers say their payment was successful but the amount never appears in your bank account
- ⚠ The displayed merchant name on a QR sticker matches your shop but the UPI ID in the payment confirmation is unfamiliar
- ⚠ Someone you do not recognise offered to 'help fix' or 'generate' your QR code and then sent you an image
- ⚠ For customers: the payment confirmation after scanning shows a different merchant name or unfamiliar UPI ID
Sources
- The420.in — AI-Manipulated QR Code Scam: Shopkeeper's Name Stayed, Money Went to Fraudster (Delhi Police, Dec 2025)
- ANI — Delhi Police bust AI-based QR code fraud, accused arrested from Rajasthan (Dec 2025)
- Tribune India — How Rajasthan teen stole money by tampering QR code at Delhi's Chandni Chowk shop
- Millennium Post — Police arrest man for QR code scam (Delhi Cyber Crime, Dec 2025)