The real scenario
You take an auto rickshaw. The agreed fare is ₹150. At the end of the ride, you pull out your phone and the driver shows you a QR code on his device, saying "Just scan and pay."
You scan it. Your UPI app opens instantly with the amount already filled in. Because you are in a hurry, you glance at the screen, see the "1" and the "5", tap "Pay", and enter your PIN. A second later, you realise ₹1,500 just left your account. The extra zero cost you ten times the fare.
You scan it. Your UPI app opens instantly with the amount already filled in. Because you are in a hurry, you glance at the screen, see the "1" and the "5", tap "Pay", and enter your PIN. A second later, you realise ₹1,500 just left your account. The extra zero cost you ten times the fare.
How does this work?
UPI QR codes can be generated dynamically to include specific parameters, including a pre-filled amount (using the `am=` parameter in the QR data). This is a legitimate feature meant to make billing faster at supermarkets or toll booths.
However, scammers abuse this by generating a custom QR code on their phone with a deliberately inflated amount. This scam relies entirely on human psychology. Our brains take shortcuts; when we expect to pay ₹150, we often just visually confirm the presence of those digits and ignore the trailing zero, especially in a rush or under pressure from the vendor.
👀
Always read the final amount aloud before entering your PIN.
Never trust a pre-filled amount from an unverified source. Verify every single digit.
🚩 Red flags to watch for
🚩
The amount is already filled in when you scan the QR for a service where the price varies (like an auto rickshaw or local market stall).
🚩
The pre-filled amount is suspiciously round (e.g., ₹1,000, ₹5,000) for a small, casual purchase.
🚩
The vendor insists you scan quickly, acts impatient, or tries to distract you by talking while you are on the payment screen.
🚩
The vendor shows you the QR code on their own mobile phone screen rather than pointing to a printed, laminated code on their desk.
✅ How to stay safe
✅
The 3-Second Rule: Stop for exactly three seconds and read the digits on your payment screen one by one before typing your PIN.
✅
Edit the amount: If a QR code has a pre-filled amount, you can usually tap on it and edit it back to the correct amount before paying. If the app doesn't let you, cancel the transaction.
✅
Use SatarkScan: Scan the QR code using the SatarkScan app first. Our engine specifically parses the `am=` parameter and triggers a HIGH RISK alert if it detects unusually large pre-filled amounts from unverified merchants.