How to Check a UPI QR Code Before Paying (and Spot QR Scams)

The short answer

A UPI QR code is a payment instruction: it holds the UPI ID that money will go to, and sometimes a name and a fixed amount. Before you pay from a screenshot or forwarded image, upload it to the QR Code Scanner to see the UPI ID, Name and Amount inside it, then compare them with what you expect. And remember the rule from the Reserve Bank of India's fraud awareness booklet: never scan a QR code to receive money. Scanning a UPI QR and entering your PIN always sends money.

What is inside a UPI QR code

When decoded, a UPI QR code is a short line of text that starts with upi://pay? followed by details joined with &. A typical one looks like this:

upi://pay?pa=shopname@okbank&pn=Sharma%20Stores&am=250.00&cu=INR

The parts that matter to you:

Part	Meaning	What to check
pa	Payee address: the UPI ID that receives the money	Is this the person or shop you meant to pay?
pn	Payee name, as typed by whoever made the code	Treat it as a label, not proof of identity
am	Amount, if the code fixes one	Is it the amount you agreed?
cu	Currency, normally INR	Should be INR for Indian payments

Codes made for a shop counter often have no amount, so you type it yourself. Codes sent for a specific bill often include one.

How to check a UPI QR code before you pay

Save the QR image. If someone sent it on WhatsApp, email or a website, save the image or take a screenshot.

Open the scanner. Go to the QR Code Scanner on your phone or computer.

Upload the image. The scanner reads the code from the image in your browser. You do not need a second phone to point a camera at it.

Read the UPI Payment panel. For a UPI code it shows the UPI ID, and the Name and Amount when the code includes them.

Compare. Does the UPI ID match the one on the shop's invoice, website or the one the person gave you directly? Is the amount right?

Pay in your UPI app. If everything matches, scan or open the code in your usual UPI app. Before you enter your PIN, check the payee details your app shows on the confirmation screen.

The scanner only reads the code. It does not connect to any bank or payment app and cannot make a payment.

Red flags that should stop you

• "Scan this to receive your refund / prize / payment." The RBI's BE(A)WARE booklet states plainly: "Never scan any QR code to receive money." Receiving money never needs you to scan anything or enter your PIN.
• Someone asks you to enter your UPI PIN to receive money. The same booklet notes that if an app asks for your PIN to complete a transaction, you will be sending money, not receiving it.
• The UPI ID does not match the business. A shop called "Sharma Stores" whose code pays a personal-looking ID such as a random name and number is worth a phone call before you pay.
• The amount is filled in and you did not agree to it. A pre-filled amount is easy to miss on a small screen.
• The name looks right but the UPI ID is unfamiliar. The pn name inside the code is just text that anyone can type. The UPI ID is what decides where money goes.
• Pressure and urgency. "Pay in the next five minutes or the order is cancelled" is a classic tactic.

Common situations

Selling something online

Buyers on classified sites sometimes send a QR code and say "scan to receive the payment". That is the scam described above. As the seller, you should be receiving money: share your own UPI ID or show your own QR code to the buyer instead. You never need to enter your PIN to be paid.

Paying a small shop from a sticker

At a counter, the code is usually printed on a stand or sticker. A sticker can be replaced or covered with another one. Before paying, check that the name and UPI ID shown by your app look like the shop, and ask the shopkeeper if in doubt.

Paying a bill from a forwarded image

For school fees, society maintenance or freelance invoices sent as an image, decode the code first and compare the UPI ID with one you already have on record from the organisation, not with details in the same message.

What the scanner cannot tell you

Reading a QR code shows what it contains. It cannot confirm who owns the UPI ID, whether a shop is genuine, or whether a deal is fair. Use it to catch mismatches, such as a wrong ID or an unexpected amount, and then rely on your UPI app's confirmation screen and your own judgement.

If you have already paid the wrong person

Act quickly. Contact your bank or UPI app's support through the app itself. In India you can also report cyber financial fraud on the national cybercrime helpline 1930 or at cybercrime.gov.in. The sooner a report is made, the better the chance of stopping the money from being moved on.

Common mistakes

• Checking only the name. The name inside a code is just a label. Check the UPI ID.
• Trusting a code because it came from a known number. Accounts get hacked and messages get forwarded. Verify through a separate channel.
• Approving a "collect request" thinking it is a payment to you. A collect request asks you to pay. Approving it with your PIN sends money.
• Sharing your own QR code screenshot with an amount filled in for the wrong figure. When you request money, check the amount before sending the image.

Related tools and guides

• Reading other QR codes from screenshots, including links and contact cards: How to Scan a QR Code from an Image or Screenshot
• Spotting fake messages and links: What Is Phishing and How to Identify It
• Reading the password inside a Wi-Fi QR code: How to See the Wi-Fi Password From a QR Code

This guide explains general safety practices and is not legal or financial advice.