Top News

While most people in India now prefer using UPI for digital payments, scammers are devising new methods to target bank accounts. A recent incident in Mumbai highlights this growing threat, where a passenger was allegedly presented with a tampered QR code by an Uber auto-rickshaw driver. Following the incident, the passenger reportedly received multiple messages regarding UPI registration from various banks. Precise details of the incident are yet to emerge. Let us understand how this 'Auto QR Code Scam' works and how you can stay safe from it.

Journalist Ashish Chaturvedi recently shared a post on his official X (Twitter) account detailing a suspicious payment situation his sister encountered after booking an Uber auto in Mumbai. According to the post, his sister booked an Uber auto, and upon the ride's conclusion, the driver showed her a tampered QR code. Suspicious, she chose to pay in cash instead. However, shortly thereafter, she began receiving multiple SMS alerts from various banks regarding UPI registration.

How does this QR code scam work?
An X user named Soham later explained the mechanics of this scam. According to his viral post, scammers initially present a fake QR code. Scanning it can trigger a backend action on the phone rather than simply opening a payment page.

🚨 NEW UPI SCAM: The "Rogue Auto QR Code" Device Takeover 🚨

A highly sophisticated UPI scam is targeting commuters using Android phones. Within minutes, victims are seeing their bank accounts linked to remote devices without their consent.

Here is exactly how this technical… https://t.co/CRff08K8er

— Soham | Strong Opinions (@__my__opinions) August 12, 2026
The post claimed that this process could trigger an automatic verification message to be sent from the victim's phone. If scammers already possess the victim's mobile number, they may attempt to register the victim's UPI ID on their own devices.

If they try this across multiple banks, the victim might receive several alerts within a short span of time. However, receiving these alerts does not necessarily mean that the victim's bank accounts have been transferred to another device.

How can you stay safe from QR code scams?
Staying safe from such scams is easy; simply avoid scanning any suspicious QR codes. Furthermore, always verify the recipient's name before entering your UPI PIN. Remember, you never need to scan a QR code to receive money, cashback, or a refund.

If you receive sudden or unexpected UPI registration messages, contact your bank immediately and report the suspected cyber fraud by calling 1930 or using the government's cybercrime reporting portal.

It is advisable to regularly check your UPI apps for any unknown registrations or linked devices. If you notice anything suspicious, contact the respective app provider and your bank immediately.

Disclaimer: This content has been sourced and edited from Dainik Jagran. While we have made modifications for clarity and presentation, the original content belongs to its respective authors and website. We do not claim ownership of the content.