A wave of sophisticated QR code scams, disturbingly inspired by cinematic portrayals of cybercrime, has been uncovered, leading to the arrest of a 19-year-old in Jaipur. These schemes exploit digital payment systems by manipulating QR codes to divert funds from unsuspecting customers directly into fraudsters’ accounts, even while displaying the legitimate merchant’s name.
Key Takeaways
- A 19-year-old arrested for QR code fraud admitted to being inspired by a Tamil film.
- Scammers use AI-based tools to alter QR codes, rerouting payments without changing the displayed merchant name.
- The fraud often targets saved QR codes, leading to prolonged periods of undetected theft.
- Police are advising businesses and consumers to use live, on-screen QR codes and verify payments in real-time.
The Modus Operandi
Investigators revealed that the accused, Manish Verma, would contact shopkeepers and commercial establishments, posing as a customer interested in making advance payments. He would request the shop’s QR code under the guise of confirming a purchase. Once received, he would use AI-based image editing applications to relink the QR code’s payment destination to his own bank account. Crucially, he would then send back the manipulated QR code, which retained the original shopkeeper’s name, thus avoiding immediate suspicion.
The scam’s effectiveness was amplified when shopkeepers or staff saved these QR code images for repeated use. Every subsequent scan of the saved image would unknowingly transfer funds directly into the fraudster’s account. This method allowed Verma to target over 100 traders across India and siphon off several lakhs of rupees, with transactions going unnoticed for weeks as shopkeepers attributed payment delays to technical issues.
Uncovering the Scam
The elaborate fraud came to light following a significant transaction at a boutique in Chandni Chowk, Delhi. A customer attempted to pay ₹1.40 lakh for a lehenga via QR code, but the amount, though debited from the buyer’s account, never reached the shopkeeper. This discrepancy triggered a technical investigation, which traced the diverted funds to a bank account in Jaipur, Rajasthan.
Film Inspiration and Technical Skills
During interrogation, Verma confessed that his inspiration for the scam came from watching the South Indian film ‘Vettaiyan,’ which depicted cyber-enabled financial crimes. He admitted to learning QR code manipulation techniques through online tutorials and utilizing AI image-editing applications. Verma, who is reportedly a Class 10 pass, was unemployed at the time of the offenses.
Police Advisory and Broader Concerns
In response to this evolving threat, Delhi Police have issued a strong advisory to traders and consumers. They urge everyone to:
- Always use live, on-screen QR codes during transactions.
- Avoid accepting payments via gallery-saved QR images.
- Verify bank credit confirmation before handing over goods or services.
Officials emphasize that QR codes should be treated as live financial instruments, not static images. This case highlights a dangerous trend where AI-powered tools are being weaponized to exploit trust in digital payment systems, underscoring the need for constant vigilance and real-time verification in an increasingly digital economy.
Sources
- ‘Inspired’ by Tamil film, how Delhi youth ran QR code fraud to divert digital payments | Delhi News, The Indian Express.
- Major QR Code Scam Exposed: Inspired by South Indian Film, Shopkeeper’s Name Stayed—Money Went to Fraudster’s
Account, The420.in. - QR code scam at Diya Krishna’s firm; Crime branch files chargesheet ; Actor Krishna Kumar says ‘Truth has
come out’, Times of India.