PhonePe warns users against Diwali QR-code scams, shares safety tips
PhonePe has warned users about Diwali-related QR-code scams involving fake merchant codes and fraudulent cashback offers. The company urges customers to verify payment details, protect their UPI credentials and report suspected financial cyber fraud through official channels.
Hyderabad: With Diwali shopping driving a surge in digital transactions, PhonePe has warned users about QR-code scams targeting festive-season shoppers. Fraudsters may place fake QR-code stickers over legitimate merchant codes or trick people into scanning codes by promising cashback, refunds, rewards or festive gifts.
How QR-code scams work
Scammers commonly use two methods. In one, they send QR-code images through WhatsApp or other messaging platforms, claiming users can receive cash rewards, bonuses or gift hampers by scanning the code and entering their UPI PIN. In another, they tamper with genuine merchant QR codes, diverting payments to fraudulent accounts.
PhonePe cautions that users do not need to enter their UPI PIN or make a payment to receive money. A UPI PIN should be entered only when authorising a payment, not to claim a reward or refund.
Safety tips for users
Users should verify the recipient’s name and payment amount before authorising transactions, particularly when scanning QR codes at shops. They should avoid suspicious links, unexpected payment requests and offers that create a false sense of urgency. Checking the authenticity of merchants and reporting deceptive requests through the PhonePe app can also help reduce risks.
PhonePe’s Protect framework is designed to flag potentially risky transactions and display contextual warnings. The platform also cites security measures such as know-your-customer (KYC) checks, biometric verification, document authentication and two-factor authentication.
What to do if you are scammed
Users who suspect fraud should report the transaction through the Help section of the PhonePe app and contact customer support. Financial cyber fraud should also be reported promptly through the National Cyber Crime Reporting Portal at cybercrime.gov.in or by calling 1930.
Suspicious calls and messages can be reported through the Chakshu facility on the Sanchar Saathi portal. Users should never share their UPI PIN, passwords or one-time passwords with anyone claiming to offer cashback, refunds or festive rewards.
