A 19-year-old has been arrested for allegedly running a sophisticated QR code scam that diverted digital payments from unsuspecting customers to his personal bank account. The fraudster, inspired by a Tamil film, used AI-based tools to manipulate genuine merchant QR codes, a method that went unnoticed for weeks.
Key Takeaways
- A 19-year-old was arrested in Jaipur for a QR code scam.
- The scam was inspired by the Tamil film ‘Vettaiyan’.
- AI tools were used to alter QR codes without changing the displayed shopkeeper’s name.
- The fraud came to light after a large transaction in Chandni Chowk, Delhi.
- Police advise using live QR codes and verifying payments before handing over goods.
The Modus Operandi
The accused, identified as Manish Verma, would contact shopkeepers and commercial establishments, posing as a customer interested in making advance payments. He would request the shop’s QR code via WhatsApp, ostensibly to confirm a purchase. Once received, Verma would upload the QR code into an AI-based image editing application. He then technically relinked the payment destination to his own bank account while ensuring the original shopkeeper’s name remained visible on the QR code display to avoid suspicion.
This manipulated QR code was then sent back to the shopkeeper. The scam’s effectiveness was amplified when shopkeepers or staff saved these QR code images in their mobile galleries for repeated use. Consequently, every time a customer scanned a saved QR code, the payment was unknowingly transferred directly into Verma’s account.
Uncovering the Scam
The elaborate fraud was brought to light following a significant transaction at a boutique in Chandni Chowk, Delhi. A customer attempted to purchase a lehenga worth ₹2.5 lakh, making two UPI payments totalling ₹1.40 lakh by scanning QR codes at the shop. Although the customer’s account showed the transactions were successful, the shop management reported that the amounts had not been credited to their official bank account.
Investigation and Arrest
A technical analysis of the UPI transaction trail revealed that the payments had been diverted to an unrelated bank account. Financial and digital forensics traced the funds to an account operated from Rajasthan. Based on mobile data and other digital footprints, police identified Verma and apprehended him from Chaksu in Jaipur. During interrogation, Verma confessed to his involvement and admitted that the idea for the scam was inspired by the Tamil film ‘Vettaiyan’. He also disclosed learning QR code manipulation techniques through online tutorials.
Evidence and Advisory
Mobile phones seized from Verma contained extensive digital evidence, including over 100 edited and original QR codes, chat logs, screenshots, and financial records. Delhi Police have issued an advisory to traders and consumers, urging them to always use live, on-screen QR codes during transactions and to avoid accepting payments via gallery-saved QR images. Verification of bank credit confirmation before handing over goods is also strongly recommended.