QR Code Scams a Concern for Commercial Establishments

HYDERABAD: Cybercriminals are targeting vendors and small commercial establishments by replacing QR codes on their premises with codes to divert payments to their personal accounts, with around 2,000 such complaints being filed every month, according to cyber experts.

In one such recent incident under the Borabanda police limits, a vendor discovered that his QR code was replaced by one that sent the payments to a fraudster’s account.

Cyber expert Praveen Kumar Tangella said, “As QR codes have become ubiquitous in our daily lives, these scams have gained prominence in recent times, as attackers can replace QR codes in places like bars, restaurants, lounges, shops and clubs, leading to unauthorised UPI payments and potential financial losses. These scanner replacement frauds have started to increase, and the risk might grow in the future.”

“It is important for both, individuals and vendors, to remain vigilant, frequently inspect their scanners, and take necessary precautions to prevent falling victim to these fraudulent practices,” he said.

He said that in most instances, counterfeit QR codes appear legitimate but lead users to malicious websites or apps. “People unknowingly scan these codes, exposing themselves to potential threats. There are 2,000 QR code scam complaints that floods each month,” Praveen said.

The police, meanwhile, said that QR codes are only for making payments and not for receiving money. Cybercrime ACP K.V.M. Prasad said: “In any situation where someone asks you to scan a QR code to receive money, it is undoubtedly a fraud.”

He said that the fraudsters were often traced to Jharkhand and Uttar Pradesh and that 99 per cent of the victims cannot recover money lost to QR code scams.

“Despite efforts to educate people through social media platforms using memes and posts, it's disheartening that educated individuals, including techies, fall victim to these scams. Avoid scanning QR codes from unknown sources, use a QR code scanner check and look for signs of tampering around the QR code, such as part of it being covered or having stickers on top,” he said.

Cyberfraudsters are now targeting vendors and small businessmen using QR codes.

Cyber expert Praveen Kumar Tangella says cyberattackers can replace QR codes in bars, restaurants, lounges, shops and clubs, leading to unauthorised UPI payments and financial losses.

Customers and vendors must remain vigilant, frequently inspect their scanners, and take precautions, Tangella says.

Expert says in most instances counterfeit QR codes appear legitimate but lead users to malicious websites or apps.

The most common way is for fraudsters to offer to send money, and send a QR code.

Upon scanning the QR code, the scamsters ask for the OTP.

Instead of the money getting credited to the account, it gets deducted.

The police say QR codes are to be used only for making payments and not for receiving money.