In a shocking cybercrime incident, police in Baghpat, Uttar Pradesh, have uncovered a high-tech scam involving fake QR codes at petrol pumps. The operation, which spanned five states, tricked unsuspecting customers into sending payments to fraudsters instead of the petrol pump owners. The investigation led to the arrest of two accused, exposing a meticulously planned scheme that swindled lakhs of rupees.
Background of the Scam
The scam came to light on September 23, 2025, at Rana Filling Station in Doaghat, Baghpat. The petrol pump owner noticed discrepancies during a routine account check, realizing that payments made via QR codes were not reflecting in his bank account. Upon filing a complaint, local police and the cybercrime cell launched an investigation, uncovering the fraudulent modus operandi used by the suspects.
The investigation revealed that the perpetrators, Rinku Kumar from Bathinda, Punjab, and Vipin from Fatehpur, Uttar Pradesh, were former fast-food vendors. After incurring losses in their previous business, they turned to cybercrime, targeting petrol pumps and public places across multiple states, including Uttar Pradesh, Haryana, Uttarakhand, Punjab, and Himachal Pradesh.
Method of Operation
The scam involved replacing legitimate QR codes at petrol pumps with counterfeit ones linked to the fraudsters’ bank accounts. Customers, unaware of the switch, scanned the fake QR codes to make payments for fuel, which were then diverted to the criminals. Despite paying, customers received their fuel as usual, leaving no immediate suspicion.
According to police, the suspects often carried out the replacement late at night to avoid detection. CCTV footage from targeted pumps captured the duo in the act, providing crucial evidence for the investigation. Their method was precise, quick, and relied on both technical knowledge and careful planning, highlighting the increasing sophistication of cybercrime operations in India.
Scale and Spread
The scam was not limited to Baghpat alone. Investigations revealed complaints lodged on the National Cybercrime Portal from locations including Muzaffarnagar and Saharanpur, suggesting a broader network. The duo had generated QR codes linked to Rinku Kumar’s bank account and strategically placed them at petrol pumps and other public sites across five states.
Authorities believe that the scam involved lakhs of rupees in fraudulent transactions. The widespread nature of the scam and the use of high-tech devices to quickly replace QR codes underline the vulnerability of digital payment systems to criminal exploitation.
apollodt.com | drivecowork.com | sportsmetafi.com
pecah.uk | CigarReviewDude.com | piznene.com
Arrest and Investigation
Following the investigation, police arrested Rinku Kumar and Vipin, who admitted during questioning that their venture into cybercrime stemmed from the failure of their fast-food business in Haridwar. They confessed to targeting petrol pumps and other public places using fake QR codes to divert payments.
During the arrests, authorities seized numerous fake scanning devices used to swiftly change QR codes at the targeted sites. These devices were crucial to the execution of the scam, allowing the criminals to operate efficiently and avoid immediate detection.
Role of Technology in the Scam
The scam highlights how technology, while offering convenience, can also be exploited. QR codes, widely used for cashless payments in India, were manipulated to reroute money directly to fraudsters’ accounts. The cybercrime cell emphasized the need for both merchants and customers to exercise caution when accepting or scanning QR codes at payment points.
Experts note that the scam reflects a trend in which cybercriminals exploit the growing reliance on digital payment infrastructure. While QR codes have made transactions faster and more convenient, they also present new vulnerabilities if not adequately monitored.
Law Enforcement Response
The Uttar Pradesh police, in collaboration with the cybercrime cell, conducted a detailed probe into the scam. Superintendent of Police (Baghpat) Suraj Kumar Rai confirmed that the duo had carried out similar operations in multiple states. The police are now working to trace additional locations where fake QR codes were deployed and are reviewing complaints on the national cybercrime portal to identify further victims.
Authorities also advised petrol pump owners to regularly check and secure QR codes, ensuring they are not tampered with. The importance of CCTV surveillance was highlighted, as footage was pivotal in catching the suspects. Law enforcement agencies across affected states have been alerted to the scam to prevent similar incidents.
Public Awareness and Safety Measures
The incident underscores the importance of public awareness regarding digital payments. Customers are advised to:
-
Verify QR codes before scanning for payments.
-
Avoid scanning codes that appear tampered with or unusually positioned.
-
Check bank transaction confirmations immediately after making a payment.
-
Report suspicious transactions to authorities and the cybercrime portal.
Merchants, particularly petrol pump owners, are encouraged to:
-
Secure QR codes by placing them in visible, tamper-proof locations.
-
Regularly audit digital payment transactions to detect discrepancies.
-
Employ CCTV surveillance and keep backup logs of transactions for verification.
Broader Implications
This case is a stark reminder that digital convenience comes with potential risks. As India increasingly shifts toward cashless transactions, fraudsters are devising innovative ways to exploit weaknesses in payment systems. Authorities stress that proactive measures by both merchants and customers, combined with rapid law enforcement response, are essential to safeguarding financial transactions.
Experts recommend periodic training for business owners on cybersecurity and digital payment safety. Additionally, technology companies providing QR code solutions may need to implement enhanced security features, such as tamper-evident codes or real-time monitoring alerts, to prevent fraudulent use.
Conclusion
The fake QR code scam at petrol pumps across five states serves as a wake-up call for both authorities and the public. The arrest of Rinku Kumar and Vipin is a significant step, but vigilance is required to prevent similar frauds in the future. As digital payments continue to dominate India’s economy, robust cybersecurity practices and awareness campaigns are crucial to ensure that convenience does not come at the cost of safety.
For petrol pump owners and other merchants, this incident highlights the importance of proactive monitoring, secure QR code placement, and immediate reporting of discrepancies. Customers, too, must remain alert and verify their transactions diligently. The scam is a cautionary tale of how modern technology, if unchecked, can be manipulated to cause financial harm to unsuspecting victims.
