OLX/Marketplace Scams: The Army-Officer and QR Code Tricks

If a “buyer” on OLX, Facebook Marketplace or a similar site claims to be an army or paramilitary officer, refuses to meet in person, sends a screenshot of a payment you cannot see in your account, and then asks you to scan a QR code or enter your UPI PIN “to receive” the money, stop immediately. A QR code and a UPI PIN are only ever used to send money, never to receive it. Scanning their code pays them. Do not scan anything, and report the fraud on cybercrime.gov.in or by calling 1930.

This scam targets sellers, not buyers, and it leans on the public respect for the armed forces to lower your guard. It has been traced to organised gangs operating across several states. Once you understand the one technical fact at its heart – PINs send money out, they never pull money in – the whole trick falls apart.

How the scam works

• They pose as a trusted buyer. Soon after you list an item – furniture, a bike, a phone, a sofa – a “buyer” contacts you claiming to be an army or CRPF officer posted in a remote area. The uniform story explains why they cannot meet you or pay cash.
• They agree instantly. They accept your price without bargaining, which feels lucky but is a warning sign.
• They send fake proof of payment. You receive a screenshot showing money “sent” to you, sometimes with a forged bank or UPI confirmation. Your account shows nothing.
• They blame a “technical issue”. When you say the money has not arrived, they claim a glitch and send you a QR code or a “collect request”, walking you through scanning it or approving it with your UPI PIN.
• The money leaves your account. Because a PIN authorises an outgoing payment, you pay them. They then say it “failed” and send another code for double the amount to “fix” it, repeating the cycle as long as you comply. Some victims are later pushed to make large direct transfers after being shown a fake army ID card.

The one fact that defeats this scam

To receive money through UPI, you never need to scan anyone’s QR code and you never enter your UPI PIN. A QR code is something you scan to pay. If an app ever asks for your UPI PIN during what is supposed to be an incoming payment, it is taking money from you, not giving it. The moment someone selling the “receive by scanning” story appears, you are talking to a fraudster.

Keep this rule in the front of your mind, because the scammers work hard to confuse it. They may show you a “collect request” that looks like money coming in, or send an official-looking QR labelled “refund” or “advance payment”. The label does not change the mechanics. Approving a collect request or scanning a QR and entering your PIN authorises money to leave your account. There is no legitimate situation in which a buyer paying you needs you to enter your own secret PIN.

Why marketplaces are targeted

Online marketplaces bring together strangers who must build quick trust around money and goods, which is exactly the gap fraudsters exploit. Sellers are often eager to close a deal, especially for second-hand items they want gone, and that eagerness can override caution. The platforms are also huge and fast-moving, so a scammer can contact many fresh listings in a short time, knowing that a handful of sellers will follow the script.

The army-officer story is chosen deliberately. It explains away the two things that would otherwise protect you – meeting in person and paying cash – while borrowing the deep public respect for the armed forces. A fake ID card, a photo in uniform, or talk of being “posted at the border” are all props to make you lower your guard and act on screenshots instead of your own bank statement.

Red flags to watch for

What to do if you are targeted

• Never scan a QR code or enter your UPI PIN to “receive” money. This is the single rule that stops the scam.
• Trust your bank, not a screenshot. Confirm payment only by checking your own bank SMS or statement. A picture proves nothing.
• Prefer cash on safe, in-person handover or a direct bank transfer to your account that you can independently verify.
• Do not share your OTP, card details, or photos of your own ID with an unknown buyer.
• Stop at the first “glitch”. A genuine payment either arrives or it does not; it never requires you to pay to receive it.
• Keep evidence. Save the chat, the profile, phone number, the fake screenshots and any QR codes or IDs they sent.

How to report

• Call 1930 as soon as possible, especially if money has left your account. Early reporting gives the best chance of freezing the receiving account, though recovery is not guaranteed.
• File at cybercrime.gov.in, the National Cyber Crime Reporting Portal, attaching screenshots, the UPI transaction IDs, and the buyer’s details.
• Tell your bank or UPI app immediately to report the fraudulent transaction and flag the beneficiary.
• Report the listing account to the marketplace so it can be reviewed and the profile taken down.
• Flag the number on the Sanchar Saathi portal so the mobile number can be examined and blocked.

Other versions of the same trick

The army-officer QR scam is one branch of a larger family of marketplace frauds. Knowing the relatives helps you spot new variations.

• The reversed roles. Sometimes the fraudster is the “seller”, advertising a cheap bike, phone or flat, taking an advance or token payment, and then disappearing. Never pay in advance for goods you have not seen.
• The overpayment story. A “buyer” claims to have paid you too much and asks you to refund the difference. The original payment was never real; only your refund is.
• The off-platform move. They quickly push you to WhatsApp or a direct call, away from the marketplace’s records and protections. Be cautious when someone rushes you off the platform.
• The fake delivery or logistics fee. You are asked to pay a small “courier” or “insurance” charge to release a payment or arrange pickup. Genuine sales do not work this way.

A safe-selling checklist

A short routine protects you on every deal.

• Meet in a public place and prefer cash, or a bank transfer you confirm in your own account before handing over the item.
• Never act on a screenshot. Check your bank SMS or passbook; that is the only proof of payment.
• Never scan a QR or enter your UPI PIN to receive money.
• Do not share OTPs, card numbers, or photographs of your own documents.
• Be suspicious of no-bargain buyers and anyone who refuses to meet or insists on urgency.
• Keep the chat on the platform where possible, and report suspicious accounts.
• Trust your instinct. If a deal feels rushed, too smooth, or oddly insistent on online payment, pause – a genuine buyer will wait while you verify.

No real officer needs you to scan a QR code to pay you for your old sofa. The uniform, the urgency and the “technical glitch” all exist to make you forget that one fact. Sell calmly, verify money only in your own bank account, and never enter your PIN to receive anything. If a buyer resists meeting or insists on QR codes, walk away – a genuine buyer will not ask you to pay in order to be paid. And if you are caught out, report quickly to 1930 and cybercrime.gov.in; it offers the best chance of help, though no one can guarantee your money back.