Movie-Inspired QR Code Scams Target Digital Payments Across India

A wave of sophisticated QR code scams, disturbingly inspired by cinematic plots, is targeting digital payment systems across India. A recent arrest in Delhi highlights how a 19-year-old used AI-powered tools to manipulate QR codes, diverting customer payments into his personal accounts, a method eerily similar to scenes depicted in a Tamil film. This evolving cybercrime trend exploits the convenience of digital transactions, posing a significant threat to businesses and consumers alike.

• A 19-year-old was arrested for manipulating QR codes to siphon digital payments.
• The scam was reportedly inspired by a Tamil film.
• AI-based image editing tools were used to alter QR codes without changing the displayed merchant name.
• The fraud targeted numerous traders across India, siphoning off substantial amounts.
• Police are advising increased vigilance and verification during digital transactions.

Investigators have uncovered a cunning scheme where fraudsters, like the recently apprehended Manish Verma, pose as customers interested in making advance payments. They request a shop’s QR code under the guise of confirming a purchase. Once received, the QR code is manipulated using AI-based image editing applications. This technical alteration relinks the payment destination to the fraudster’s bank account while crucially retaining the original shopkeeper’s name on the displayed QR code to avoid immediate suspicion.

The manipulated QR code is then returned to the unsuspecting shopkeeper. The vulnerability often lies in shopkeepers or staff saving these QR code images for repeated use. Every subsequent scan of this saved QR code by a customer unknowingly directs the funds into the scammer’s account, allowing the fraud to go unnoticed for weeks as shopkeepers might attribute payment delays to technical issues.

The elaborate scam came to light following a significant transaction at a boutique in Chandni Chowk, Delhi. A customer attempted to purchase a lehenga worth ₹2.5 lakh, making two UPI payments totaling ₹1.40 lakh. Despite the customer providing screenshots of successful transactions, the shop management confirmed that the amounts were never credited to their official account. A technical investigation revealed the payments were diverted to a bank account in Rajasthan.

Digital forensics and financial analysis traced the diverted funds to Jaipur, Rajasthan, leading to the arrest of Manish Verma. During interrogation, Verma confessed to his involvement and admitted that the inspiration for manipulating QR codes came from the Tamil film ‘Vettaiyan.’ He learned the techniques through online tutorials and AI image-editing applications. Police seized over 100 manipulated QR codes, chat histories, and financial records from his mobile phone, indicating a wider network of potential victims across India.

This case is not isolated. Another incident involved employees of actor Krishna Kumar’s daughter, Diya Krishna, who allegedly used personal QR codes to divert ₹66 lakh over two years. While this case involved internal fraud rather than external manipulation, it underscores the vulnerabilities within digital payment systems.

In response to these escalating threats, Delhi Police have issued a strong advisory. They urge traders and consumers to treat QR codes as live financial instruments, not static images. Key recommendations include:

• Always use live, on-screen QR codes during transactions.
• Avoid accepting payments via gallery-saved QR images.
• Verify bank credit confirmation before handing over goods or services.

This evolving landscape of cybercrime, where AI is weaponized to exploit trust in digital payments, necessitates constant vigilance and real-time verification to safeguard against financial losses.

• ‘Inspired’ by Tamil film, how Delhi youth ran QR code fraud to divert digital payments | Delhi News, The Indian Express.
• Major QR Code Scam Exposed: Inspired by South Indian Film, Shopkeeper’s Name Stayed—Money Went to Fraudster’s
  Account, The420.in.
• QR code scam at Diya Krishna’s firm; Crime branch files chargesheet ; Actor Krishna Kumar says ‘Truth has
  come out’, Times of India.
• Jaipur teenager held for tampering QR codes to siphon payments from Delhi shops, The New Indian Express.