India’s QR Code Crisis: A Silent but Growing Threat

India is quietly facing a rising wave of QR code fraud that few are taking seriously. Across cities, scammers are replacing legitimate QR codes at shops, parking meters, and public spaces with fake ones. These altered codes redirect payments to the fraudster’s account, often through deceptive URLs that look legitimate.

The country’s cybersecurity agency, CERT-In, has flagged various scams involving QR codes—from fake lottery wins to phony payment requests. The danger lies in how seamless these scams are: visually, a fake QR code looks identical to a real one. With no easy way to verify, users fall into the trap without knowing.

Recent cases highlight the scale of the problem. In Mumbai, a teenager replaced QR codes in local stores for two months, stealing up to ₹49,000 before being caught. In Jaipur, police are warning businesses to lock or remove their QR codes overnight, as scammers are specifically targeting payment platforms like Paytm, PhonePe, and Google Pay.

Religious sites aren’t safe either. In Nagpur, authorities froze accounts after digital donations were found possibly diverted via fraudulent QR banners. And in Thiruvananthapuram, police are investigating a large-scale attempt to siphon off ₹6.9 million (69 lakh rupees) through swapped QR codes.

Despite these incidents, public awareness remains low. Small businesses and consumers often overlook the risk, and no major public safety campaigns have been launched. Since the financial losses can range from hundreds to tens of thousands of rupees, many still underestimate how quick and easy this fraud can be.