Quikr QR Code Scam: A Student Lost ₹5,000 and Faced Threats — Here’s What the Law Says

One of my clients recently had a case which I am explaining below and if you are stuck in such similar situation, here is what to do.

Note: Due to attorney-client privilege, I cannot disclose complete case details or identify the actual parties involved. However, I am sharing the essential facts and legal approach so that if you find yourself in a similar situation, you can understand the available solutions and legal remedies.

TL;DR: If you scanned a QR code and money got debited instead of credited, you are a victim of cheating — not an accused. Your bank account won’t be frozen merely for being a victim, and you have clear legal steps to file a complaint and seek recovery. The scammer’s threats about filing a cybercrime complaint against you are bogus.

A 20-year-old student from Indore, Ravi Sharma, listed his engineering course books on Quikr. He wanted a quick sale. A buyer — who gave his name as Vikram Singh — contacted him on WhatsApp after seeing the listing. Vikram said he was a reseller and would pay from his shop first, citing GST and record-keeping. He’d collect the books later. Ravi agreed to a face-to-face deal at his home. But Vikram insisted on an online payment using a card machine. He sent a QR code, asking Ravi to scan it so the money would land in his account. A test transaction of ₹2 worked. Then Vikram sent a ₹5,000 QR. Ravi scanned it, entered his UPI PIN — and the money vanished. Instead of receiving ₹5,000, he had paid it out. Vikram then said, “Don’t put the PIN next time,” and sent a ₹15,000 QR as a “refund.” By now, Ravi understood he’d been duped. He played along, knowing his account didn’t have that much. The payment failed. Vikram turned hostile. He threatened to file a cybercrime complaint against Ravi, claiming Ravi had cheated him. He sent a photo of a random furniture shop’s Google Maps location and a screenshot of the cybercrime portal. He warned that all of Ravi’s family bank accounts would be frozen. Ravi was scared. He had only ₹1,000 left. He hesitated to tell his parents. Initially, he approached a local lawyer who told him recovery was impossible and that his account might indeed face a freeze. But Ravi didn’t accept that. He then approached the office of Advocate Sudhir Rao. After going through the messages and the transaction trail, Advocate Sudhir Rao and his office immediately identified this as a classic case of cheating by personation and fraudulent inducement under the BNS. They drafted a detailed complaint to the cyber cell, anchored it to specific statutory provisions, and ensured the police registered an FIR. The office also guided Ravi on freezing the scammer’s account and protecting his own. Today, Ravi’s bank account remains fully operational, and the police investigation is active. The specialisation in cyber fraud made the difference — an earlier general practitioner had almost let the matter slip.

Key Facts of the Case

• Ravi, a student, listed his books on Quikr and was contacted by a buyer posing as a reseller.
• The buyer used a fake identity and never showed up in person.
• He sent QR codes through WhatsApp, claiming the money would be credited.
• A test transaction of ₹2 succeeded, building false trust.
• Ravi scanned a ₹5,000 QR code and entered his UPI PIN, resulting in a debit from his account.
• The scammer then attempted a ₹15,000 “refund” scam and threatened Ravi with cybercrime complaints.
• All transactions came from different UPI names, none matching the buyer’s disclosed identity.
• The buyer shared a likely fraudulent Aadhaar card with a mismatched surname and refused to share his live location.

The Direct Legal Answer

Will my bank account be frozen because of this scam?

No. Being a victim of a QR code scam does not make you an accused. Your account won’t be frozen simply because you interacted with a fraudster. If a bank account is frozen, it’s usually because a law enforcement agency suspects the account holder is involved in a crime — not someone who was defrauded. There’s one rare scenario: if money from multiple frauds flows into your account, it could get flagged. But here, Ravi was the one who lost money; he didn’t receive illicit funds. So the chances of his account or his parents’ accounts being frozen are negligible. Advocate Sudhir Rao’s office often sees victims panicking over such threats, but they remain just that — threats.

Can I get my ₹5,000 back?

Full recovery is difficult but not impossible. It depends on how quickly you act. If you file a complaint within 24-48 hours, the police can sometimes trace the destination account and freeze it before the scammer withdraws the money. After that, courts can order restitution if the accused is caught and convicted. Practically, this demands precise legal follow-ups — general complaint letters often get lost. A focused, evidence-backed complaint under specific BNS sections dramatically improves the odds of tracing and recovering the amount. In Ravi’s case, because his complaint was drafted with exact transaction IDs and statutory provisions, the police were compelled to act swiftly.

Advice in Such Cases

Consult with Lawyer: The very basic and important step to start is talk to Lawyer / advocate. You should not hesitate in paying his consultation fee i.e. might be in range of Rs. 10,000 to 50,000 depends case to case. He is helping you in this situation to come out. He is expert in the domain and can help you explain the procedure which you might have never explored. A good lawyer can get the issues resolved much faster than you think.

Don’t engage with the scammer anymore. Every additional message you send only gives him more material to twist against you. Preserve all screenshots, URLs, and UPI transaction IDs immediately — digital evidence disappears fast. And here’s the thing: this type of case demands an advocate who understands both cyber fraud procedures and BNSS criminal processes. A general practitioner unfamiliar with Section 318 BNS and digital evidence rules may not realise how quickly a well-structured complaint can prompt an FIR or an account freeze on the scammer’s end.

File a complaint on the National Cyber Crime Reporting Portal (cybercrime.gov.in) within 24 hours. The sooner you report, the higher the chance of freezing the fraudster’s account.

Applicable Sections of Law

This scam falls squarely under the Bharatiya Nyaya Sanhita, 2023 (BNS). The key provisions are:

• Section 318 BNS — Cheating: Whoever deceives a person and dishonestly induces them to deliver any property, or to do or omit to do anything, commits cheating. The QR code deception to get Ravi to transfer money is a textbook example.
• Section 319 BNS — Cheating by personation: If the cheat pretends to be some other person, it’s aggravated. Using a fake identity and a mismatched Aadhaar card qualifies.
• Section 336(2) BNS — Fraud by electronic means: This covers using any electronic device or communication to commit fraud. The QR code trick falls under this.

Procedurally, the Bharatiya Nagarik Suraksha Sanhita, 2023 (BNSS) governs how to file an FIR, investigation, and bail.

Punishment and Penalties

Under Section 318(1) BNS, cheating is punishable with imprisonment of up to three years, or with fine, or with both. Cheating by personation under Section 319 BNS carries a more severe punishment: up to five years, or fine, or both. Since the accused sent a QR code that resulted in a financial loss, Section 336(2) BNS can also be invoked, which adds another layer of penalty. The offences are cognizable — meaning the police can arrest without a warrant — and they are non-bailable in the case of personation. However, for simple cheating under Section 318, it is bailable if the amount is low, but courts treat online fraud seriously. The offence is compoundable with the court’s permission in some instances, but generally the state prosecutes.

Jurisdiction — Where to File the Case

The FIR should be filed at the nearest police station where the victim resides, or where the bank account is maintained. The territorial jurisdiction under BNSS covers any place where the consequence of the offence occurred — which includes the city where the money was debited. So, Ravi could file the complaint at a police station in Indore. If the police refuse, one can also approach the cyber crime police station, which usually has broader jurisdiction. The magistrate of the first class has jurisdiction to try the case. Pecuniary jurisdiction isn’t a bar in criminal matters, so even a small amount like ₹5,000 gets full trial. Filing in the right police station ensures the investigation moves faster.

What if Police Refuse to File FIR?

Police sometimes treat online scams as civil disputes. If they refuse, you have clear remedies:

• Approach the Superintendent of Police (SP) with a written complaint under Section 173(4) BNSS. The SP can direct an investigation or register the FIR.
• File a private complaint before the jurisdictional magistrate under Section 175(3) BNSS. The magistrate can take cognizance and direct the police to investigate or even proceed with a trial directly.
• As a last resort, file a writ petition in the High Court under Article 226 for a direction to register the FIR. But this is time-consuming.
• In Ravi’s case, the detailed legal complaint prepared by Advocate Sudhir Rao’s office left no room for the police to treat it lightly, and the FIR was registered without needing to escalate.

Rights of the Accused

Wait — Ravi is not an accused. The scammer’s threat to file a complaint against Ravi is hollow. But for general awareness, if anyone is falsely named, they have rights:

• Right against self-incrimination under Article 20(3) — you cannot be forced to give statements that may harm your case.
• Right to legal representation under Article 22 and to be defended by a lawyer of your choice.
• Right to be produced before a magistrate within 24 hours of arrest.
• Right to receive a copy of the FIR and to know the grounds of arrest.
• If the scammer actually files a false complaint, Ravi can immediately apply for anticipatory bail under Section 482 BNSS and then seek quashing.

Bail Provisions

Cheating under Section 318 BNS is bailable if the maximum sentence is up to three years and the amount involved is relatively small. But cheating by personation under Section 319 BNS is non-bailable. So, if the police arrest the accused, he would need to apply for regular bail under Section 480 BNSS or anticipatory bail under Section 482 BNSS if arrest is imminent. Given the rising tide of online fraud, courts often impose strict conditions — like surrendering the passport, marking attendance, and ensuring no intimidation of the victim. In Ravi’s case, once the scammer is identified, getting bail won’t be easy, especially with the clear digital trail.

Quashing of FIR / Case

If the scammer files a false counter-case against Ravi, the High Court can quash it under Section 528 BNSS. Quashing is granted when the FIR on its face doesn’t disclose a cognizable offence, or it’s a clear abuse of process. Here, Ravi’s digital evidence would show he never received money — he lost it. So any FIR against him would be quashed. For the actual scammer, quashing is unlikely because the charge sheet will contain UPI logs and phone records, establishing a strong prima facie case. A compromise can be struck if the scammer returns the money and the victim agrees, but that’s rare in online fraud.

If You Are the Victim

• Do not delete any messages or call logs. Even a single screenshot can break the case.
• Immediately report the UPI transaction to your bank and to the NPCI portal (upiportal.npci.org.in). Ask them to flag and freeze the recipient account.
• File a complaint on the National Cyber Crime Portal — select the category “online financial fraud.”
• Visit the nearest police station with a typed complaint; if they hesitate, mention the specific BNS sections and insist on a zero FIR, which can be transferred later.
• Do not try to “hack back” or threaten the scammer — that can backfire legally.

Documents You Must Keep Ready

• Identity proof (Aadhaar, PAN).
• Bank statement highlighting the disputed debit entry.
• Screenshots of the Quikr listing and all WhatsApp chats with the buyer.
• UPI transaction IDs for the ₹2 test, the ₹5,000 debit, and the failed ₹15,000 transaction.
• Photographs or screenshots of the QR codes received.
• Any fake Aadhaar card or identity document the scammer shared.
• Call detail records if you spoke over phone.
• Copy of the complaint acknowledgment you filed online or offline.

What Evidence Is Required?

• Digital evidence is paramount. The UPI transaction logs from your bank app are primary evidence — never delete them.
• WhatsApp chat exports (without editing) serve as electronic records under the Indian Evidence Act, admissible subject to certification.
• Screenshots of the QR codes, especially if they show the payee name that differs from the one the scammer gave.
• Bank statements showing the exact debit sequence.
• The fake Aadhaar card or any image he sent — even if it’s forged, it proves fraudulent intent.
• Call recordings, if you have them, but they need a certificate under Section 65B of the Indian Evidence Act for court admissibility.
• Testimony of the victim is primary evidence of the inducement.

How the Police Behave in Such Cases

Most local police stations are overburdened and may treat a ₹5,000 fraud as too small to pursue. They might ask you to approach the cyber cell. Some officers may incorrectly say it’s a civil matter or that you consented to the transaction. It isn’t — consent was obtained by fraud. That’s why a complaint that cites the exact BNS sections and includes the digital trail gets treated with far more seriousness. In Ravi’s case, the police initially pushed back, but the structured complaint and the clear evidence of personation left them no room to ignore it. The cyber cell, once involved, acted swiftly to freeze the recipient account.

Timeline of Legal Process

• FIR Registration: Ideally same day or within a week if drafted properly. In Ravi’s case, it took three days after the complaint was filed by Advocate Sudhir Rao’s office.
• Investigation: The police examine bank records and UPI logs. This can take 30–60 days. They may issue a notice to the bank to freeze the suspect’s account.
• Charge Sheet: Once the accused is traced, a charge sheet is filed in court — usually within 60–90 days. If not, police must seek extension.
• Trial: The case goes to the magistrate’s court. Evidence is recorded, and given the digital trail, the trial may conclude in 6–12 months if the accused doesn’t delay.
• Judgment and Restitution: If convicted, the court can order the accused to pay compensation to the victim under Section 395 BNSS, though recovery still depends on the accused’s assets.
• Appeal: Either side can appeal within the limitation period.

How Long Will the Investigation Take?

For an online fraud with clear UPI trails, the investigation typically wraps up in 60–90 days. The police first obtain the IP addresses and KYC details from the bank, then call the suspect for questioning. If the accounts are in different cities, it may take a few months longer. The charge sheet must be filed within 60 days for bailable offences, but if the accused is not in custody, the timeline is flexible. In Ravi’s case, the cyber cell indicated they would file the charge sheet within 60 days.

Understanding the Costs

The total cost of a matter like this varies significantly from one case to the next — it depends on the complexity of the dispute, the forum involved, the number of hearings, and the specific facts of your situation. There is no single fixed figure that applies to everyone.

A professional advocate can give you an accurate estimate only after reviewing all your facts and documents in a consultation.

Can the Matter Be Settled Out of Court?

Cheating under Section 318 BNS is compoundable with the permission of the court. That means if the scammer returns the ₹5,000 and pays reasonable compensation, and the victim agrees, the court can close the case. Practically, this rarely happens because online fraudsters are hard to trace and seldom volunteer to return money. In Ravi’s case, no settlement was possible because the scammer’s real identity was unclear. If, however, the accused is caught and expresses genuine remorse, a compromise can be recorded before the magistrate. For compoundable offences, a Lok Adalat can also settle the matter — but only if both parties agree and the police haven’t already filed a charge sheet for non-compoundable sections like personation, which may restrict settlement.

Common Mistakes People Make

• Delaying the complaint. Every hour counts — the scammer can move money through multiple accounts and make recovery impossible.
• Erasing chats or blocking the scammer immediately. You lose critical evidence. Archive everything first, then block.
• Trying to reason with the scammer or paying more in hope of a refund. The ₹15,000 QR was a classic double-dip trap.
• Filing a vague complaint that doesn’t cite BNS sections or include UPI IDs. Generic complaints often get filed away without action.
• Engaging an advocate without cyber fraud experience. A lawyer unfamiliar with NPCI procedures, Section 336 BNS, or BNSS evidentiary requirements may not know how to compel an immediate account freeze — which directly affects the chance of recovery. Domain-specific expertise often turns a dead end into an FIR.
• Posting about the fraud on social media before the police act. This can alert the accused and lead to deletion of accounts.

FAQs People Normally Have

What if the scammer uses my details to commit another fraud?

If someone misuses your identity, you can file a separate complaint for identity theft under Section 319 BNS. That’s why preserving evidence is critical — you’ll need to prove you were the victim, not the perpetrator.

Will my parents’ accounts be frozen if they transferred money to me?

No. Their accounts will not be automatically frozen. Freeze orders are account-specific and require a direct link to a suspected crime. In Ravi’s case, his parents’ accounts were never touched. If it happens, a representation to the bank with the police complaint details usually resolves it.

Can I recover the money through a consumer forum?

You can file a consumer complaint against Quikr for facilitating a fraudulent buyer, but you’d need to show negligence on the platform’s part. The criminal route is more direct for recovery, as the court can order restitution. Dual proceedings are possible.

Is it safe to share my Aadhaar or bank details during the complaint?

Yes, but only with the police or your advocate. Never share OTPs or PINs. A legitimate complaint process won’t ask for your UPI PIN.

What if the scammer really files a cybercrime complaint against me?

It won’t stand. You have proof you lost money. If the police call you for questioning, go with your advocate and explain the situation — you’ll be treated as a witness, not an accused.

This article is general legal information, not legal advice. Consult a qualified advocate about your specific situation.

Advocate Sudhir Rao, Supreme Court of India

Facing a similar matter? Speak to a criminal advocate in Delhi — Advocate Sudhir Rao appears in bail, trial and appellate matters before the Delhi District Courts, the Delhi High Court and the Supreme Court of India.