Technology Desk: The use of UPI for digital payments has increased rapidly in India. Along with this, new methods of cyber fraud are also emerging. A recent case reported from Mumbai is in the news regarding a possible new type of UPI scam through QR Code. In this case, a passenger allegedly paid in cash after becoming suspicious over the QR code shown by the Uber auto driver. Shortly after this, many SMS related to UPI registration started coming on the passenger's phone from different banks.
Information regarding this incident has been shared on social media about a possible method through which fake QR Codes can be used to trigger the process of UPI registration.
What is the whole matter?
Journalist Ashish Chaturvedi posted about the incident on his official According to him, his sister had booked an Uber auto in Mumbai. After completion of the ride, the driver showed a QR Code for payment.
Looking at the QR Code, he felt something suspicious. Instead of scanning it, he paid in cash. After this, many SMS related to UPI registration started coming on his phone from different banks.
After this incident, discussion started on social media about possible UPI scam through QR Code.
How can fake QR Code cause scam?
An X user named Soham tried to explain the possible technical process of this incident through a social media post. According to him, scammers can use a fake QR Code that looks like a normal payment QR Code.
Generally, on scanning the QR Code, the payment page opens to send money to a person or merchant. But if the QR Code is designed in such a way that it is linked to some suspicious link or other action, then the situation may be different.
According to the claim made on social media, scanning such a QR Code can initiate a process like sending automatic verification SMS from the phone. This SMS can be used for verification of mobile number in the process of UPI registration. However, it is important to note that whether or not this actually happened in this particular case has not yet been independently confirmed.
How can scammers get a mobile number?
Mobile number plays an important role in UPI registration. The mobile number linked to the bank account is used for registration and verification in the UPI app.
According to the possible method shared on social media, if a scammer already has the victim's mobile number, he can try to do UPI registration with that number on his device.
In this process, verification may be required from the bank or UPI system. In such a situation, it has been claimed that the verification SMS sent from the victim's phone is being used to take the registration process forward.
Why can multiple UPI registration SMS come simultaneously?
If a person tries to register with different banks or UPI services with the same mobile number, the phone may receive multiple SMS in a short period of time. For this reason, the victim may receive alerts about UPI registration from different banks simultaneously.
However, just by receiving such SMS does not mean that all the bank accounts of the victim have been successfully transferred or linked to the phone of another person. These messages may be related to the registration attempt or verification process.
What things should be kept in mind while scanning QR Code?
While making payment through UPI, it is important to avoid scanning any unknown or suspicious QR Code. Especially when the QR Code is suddenly shown by someone or an additional sticker is seen stuck on it.
Before making payment, please check the name of the receiver appearing in the UPI app. If the name is not correct or the payment information looks suspicious, do not proceed with the transaction.
Another important thing is that to receive money, cashback or refund, there is generally no need to scan the QR Code and enter the UPI PIN. Scanning the QR code and entering the UPI PIN is usually part of the process of sending money.
What to do if you suddenly receive UPI registration SMS?
If you have not registered yourself with any new UPI app or bank and suddenly SMS related to UPI registration start coming, then it should not be ignored.
In such a situation, first of all you should contact the concerned bank to get information about the status of your account and UPI services. You should also check your UPI app to see if any unknown registration, linked bank account or device is visible.
If any suspicious transaction has taken place or there is suspicion of cyber fraud, a complaint of cyber fraud can be lodged immediately by calling 1930. Complaints can also be made through the government cybercrime reporting portal.
Additionally, it is important to periodically check linked accounts, devices, and other security settings in the UPI app and banking app.
Follow the LALLURAM.COM MP channel on WhatsApp