In short
Someone claims you must scan a QR code and enter your UPI PIN to receive money, a refund or a reward The objective is typically to authorize a debit from the victim's account instead of receiving money.
What it is
The fraudster reverses the meaning of a payment flow and presents a debit authorization as a credit. The victim is then pushed to scan the QR and enter the UPI PIN.
How it starts
Someone claims you must scan a QR code and enter your UPI PIN to receive money, a refund or a reward.
What they tell you
The fraudster reverses the meaning of a payment flow and presents a debit authorization as a credit
What they want you to do
Scan the QR and enter the UPI PIN
How you lose money
authorize a debit from the victim's account instead of receiving money
What happens next
After the first successful step, the fraudster may demand more money/information, deepen account or device access, or disappear.
Warning signs
trust | urgency | confusion | QR code | UPI PIN social engineering
Where this is documented
India — officially documented by an Indian authority/regulator
How to avoid it
Remember that a UPI PIN authorizes a debit; verify collect requests and QR codes before approving; do not install screen-sharing or SMS-forwarding apps at a stranger's request.
If it already happened
Contact the bank/payment provider immediately if money moved; report financial cyber fraud promptly via 1930 and cybercrime.gov.in; preserve messages, transaction IDs, phone numbers and URLs.