How they actually get people.
Every one of these is running in India right now. The script barely changes - which is exactly why it is catchable.
Scam types
UPI & QR
- All scams
- Account Takeover & Identity10
- Advance Fee & Prize5
- Banking & Payments16
- Business & Corporate6
- Crypto2
- Device & Malware6
- Extortion2
- Government & Authority Impersonation13
- Investment & Trading12
- Jobs & Earnings6
- Loans & Credit1
- Relationship & Social3
- Shopping & Services8
- Tax, Insurance & Benefits4
- UPI & QR7
7 scams
UPI & QR · Aadhaar-linked payment fraud
Aadhaar Enabled Payment System (AePS) Fraud
A fraud scheme targets Aadhaar-enabled banking/payment transactions or authentication at AePS touchpoints The objective is typically to cause an unauthorized Aadhaar-enabled debit or withdrawal.
Also called Aadhaar payment scam, AePS scam
UPI & QR · Reward phishing
Fake UPI Cashback / Reward Link Scam
A message or promotion promises cashback, a reward or another benefit through a link or payment step The objective is typically to steal credentials or cause a fraudulent debit.
Also called cashback scam, reward link scam
UPI & QR · Collect-request abuse
Fraudulent UPI Collect Request
An unexpected UPI collect request arrives, often accompanied by a convincing story The objective is typically to authorize a payment to the fraudster.
Also called UPI request money scam, collect request scam
UPI & QR · QR substitution
QR Code Tampering Scam
A legitimate-looking QR code has been replaced or altered to redirect the victim elsewhere The objective is typically to redirect payment or steal login/financial information through a malicious destination.
Also called QR sticker scam, fake QR
UPI & QR · Official reporting category
UPI Fraud (Umbrella)
A financial fraud is carried out through or around a UPI transaction/account The objective is typically to cause an unauthorized or deceptively authorized UPI transfer.
Also called UPI scam
UPI & QR · Authentication social engineering
UPI PIN Harvesting / Deceptive Authorization
A fraudster tricks the victim into entering a UPI PIN under a false purpose The objective is typically to authorize a debit or expose authentication in a fraudulent flow.
Also called PIN to receive money scam, UPI PIN scam
UPI & QR · QR social engineering
UPI QR 'Receive Money' Scam
Someone claims you must scan a QR code and enter your UPI PIN to receive money, a refund or a reward The objective is typically to authorize a debit from the victim's account instead of receiving money.
Also called QR receive scam, scan to receive scam
The tactics
Eight scripts that account for most of what lands on Indian phones.
The one that empties accounts fastestKYC / PAN / Aadhaar "expiry"
An SMS or WhatsApp from "your bank" says your KYC has expired and the account will be frozen within 24 hours. A link takes you to a page that looks exactly right, and asks for your card number, then the OTP.
The one that starts with ₹150 creditedPart-time task job
A WhatsApp message from an unknown international number offers ₹2,000-5,000 a day for liking YouTube videos or rating hotels. You’re moved to Telegram. The first three tasks pay real money into your account. Then comes the "prepaid task" - deposit ₹10,000 to unlock a bigger commission. Every deposit needs one more deposit to withdraw.
The one people are too embarrassed to reportDigital arrest
A call claiming to be CBI, Customs, or the Narcotics Bureau: a parcel in your name contained drugs, or your Aadhaar was used for money laundering. They move you to a video call with a fake police backdrop and keep you on it for hours, telling you not to contact anyone. Then they demand a "verification deposit" to a bank account.
The one that reverses the direction of moneyQR code "to receive"
You’re selling something on OLX or Facebook Marketplace. The "buyer" sends a QR code and says scan it to receive the payment. Sometimes they even send a small amount first to build trust.
The one that uses your own screen against youFake customer care + screen share
You Google a helpline number for a refund and land on a paid ad or an SEO’d fake page. The "agent" is helpful, then asks you to install AnyDesk, TeamViewer, or Quick Support so they can "process the refund faster". Once installed, they watch you type your PIN.
The one that looks like a favourWrong transfer / refund reversal
Money arrives in your account. A stranger calls, distressed, saying they transferred it by mistake and please send it back. The incoming money is often from a stolen account or a credit that will be reversed - you end up paying twice.
The one that ends in blackmailInstant loan apps
A loan approved in four minutes with no paperwork - but the app demands access to your contacts and photo gallery. Repayment terms turn out to be brutal, and when you fall behind, they message everyone in your contacts and send morphed photos.
The one dressed up as financial literacyWhatsApp trading group
You’re added to a group with a "SEBI-registered" analyst and hundreds of members posting screenshots of profits. The calls are free and seem accurate. Then comes an invitation to a private app with a special IPO allotment or block deal. The app shows your money growing. It just can’t be withdrawn.