A Pune police constable lost more than Rs 2.3 lakh after falling victim to a QR-code scam. Saswad resident was attempting to make a simple payment for a few items he had purchased from a local bakery. However, what began as a normal transaction turned into a nightmare when unauthorised transactions emptied his bank accounts, including his gold loans account.
The constable discovered more about the fraud when he noticed an unauthorised debit of Rs 18,755 from his bank account. After further investigation, he discovered that Rs 12,250 had been withdrawn from his salary account. This was not all; he later discovered that an unauthorised transaction of Rs 1.9 lakh from his gold loan account occurred. Interestingly, he received the OTPs for the transaction but never shared them, and the transaction was completed successfully.
Following that, the scammers attempted to make additional unauthorized transactions totaling Rs 14,000 using the constable’s credit card. However, the constable acted quickly by freezing his bank accounts and credit card, preventing further financial damage.
Following police investigations, it was discovered that the fraudsters had gained access to the constable’s bank accounts and mobile phones after he downloaded an APK file by clicking a deceptive link sent by the scammers. The malware delivered via this link captured sensitive information such as login credentials and OTPs, allowing scammers to bypass all security measures to carry out fraudulent transactions.
It is still unknown whether the constable’s QR code was tampered with or if the scam was carried out using another method. This isn’t the first time a user has been defrauded of a large sum. Previously, many such scams were identified after users unknowingly downloaded APK applications.
It is advised that the users always verify QR codes before scanning and making the payments.
Double-check the name of the user after scanning the QR codes for payments.
Do not click on suspicious links received via messages, emails, or social media.
Download payment applications from credible sources like Google Play Store or App Store.