The OLX "army officer" QR code scam: how it works and how to sell safely
A polite buyer in uniform, a payment screenshot and a QR code to scan. Police and the RBI have described this script for years. Here is how to spot it and what to do if it has already cost you money.
Quick answer: If a buyer on OLX, Quikr or Facebook Marketplace says he is an army officer posted far away, can't come to see the item, and sends you a QR code or payment request "so you can receive the money", treat it as a scam. On UPI you never scan a code or enter your PIN to receive money; the Reserve Bank of India says this plainly. Stop replying and don't scan anything. If you have already lost money, call 1930 or report at cybercrime.gov.in straight away.
How the scam works, step by step
Police in several states have described the same script for years. The Delhi Police cyber cell's guidance on OLX fraud sets it out in stages, and the details below follow that account.
- The approach. You list a phone, laptop, bike or piece of furniture. Someone contacts you quickly, agrees to your price with little or no bargaining, and says he is in the Army or a paramilitary force, posted somewhere remote, so he can't come in person or pay cash.
- The trust props. He may send a photo of an ID card or himself in uniform. Delhi Police specifically warns about fake identity documents from national institutions.
- The fake payment. He sends a screenshot showing that money has been "sent" to you. Nothing arrives in your account.
- The QR code. When you say you haven't received it, he sends a QR code, or a UPI "request money" prompt, and tells you to scan or approve it so the payment can go through. Completing it asks for your UPI PIN.
- The debit. You enter your PIN, and money leaves your account instead of arriving.
- The loop. He apologises, says it was a technical mistake, and sends another code so you can "get your money back", often for double the amount. Delhi Police notes that this cycle can repeat until losses run into thousands or lakhs of rupees.
The RBI's BE(A)WARE booklet on fraud describes the same pattern under frauds on online sales platforms. It notes that many fraudsters pretend to be defence personnel posted in remote locations, then use the UPI "request money" option and press the seller to approve it with their PIN.
Why the "army officer" story works
The uniform explains away every oddity. It accounts for why he can't meet, why he can't pay cash, why there is a rush (a posting or transfer), and why a colleague or courier will collect the item later. It also borrows the respect most people feel for the armed forces, which makes it awkward to ask hard questions.
Real service members buy and sell online like anyone else. The claim itself proves nothing either way. What gives the scam away is what follows: pressure, a payment you can't see, and a request for you to do something on your UPI app.
Reported cases
- In February 2020, Bengaluru's Central Crime Branch arrested a five-member gang from Bharatpur district in Rajasthan. According to Deccan Herald, police said the arrests solved about 200 of the 316 cyber frauds reported in the city since 2019. The gang sent sellers QR codes to scan and usually claimed to be army officers or policemen.
- The same month, The News Minute reported that Tamil Nadu police had arrested two men, also from Bharatpur, over a mirror-image version aimed at buyers: fake "army officers" listing second-hand vehicles, then demanding advance payments followed by courier, insurance and tax charges.
The buyer-side version is the same trick pointed the other way. If you are shopping rather than selling, see too-cheap iPhones on Instagram and OLX.
The one rule that defeats it
Receiving money never needs your PIN. The RBI's booklet says there is no need to enter a PIN or password anywhere to receive money, and that if an app asks for your PIN to complete a transaction, you are sending money, not receiving it. It also advises never scanning a QR code to receive money.
When a genuine buyer pays you, they do the work: they send money to your UPI ID or phone number, or scan your code. Your only job is to check that the money has arrived.
And a screenshot is not a payment. Screenshots are easy to edit or reuse. Open your own bank or UPI app and look for the credit in your transaction history. Don't rely on an image, and don't rely on a message the buyer forwards to you.
Red flags to watch for
| What the buyer does | Why it matters |
|---|---|
| Agrees to your price instantly, asks nothing about condition | He isn't interested in the item, only in getting you to a payment step |
| Says he is posted remotely, on duty or being transferred | A ready-made reason never to meet or inspect anything |
| Sends an ID card or uniform photo without being asked | Delhi Police warns sellers to be wary of fake identity proofs |
| Sends a payment screenshot, but your account shows nothing | Only your own bank or UPI app confirms a payment |
| Sends a QR code, payment link or request for you to approve | Scanning or approving with your PIN sends your money out |
| Says he "overpaid" and asks you to return the difference | The US Federal Trade Commission lists fake overpayment refunds as a common trick against online sellers |
| Asks for an OTP or verification code "to confirm you are genuine" | Codes sent to your phone can be used to take over accounts; the RBI's booklet says never to share OTPs |
| Pushes you to act fast | Delhi Police lists unreasonable urgency as a likely sign of fraud |
How to sell safely instead
- Meet in person. Pick a busy public place in daylight and take someone with you. The FTC's advice to online sellers also favours local, in-person sales.
- Let the buyer inspect first, then take payment. Watch the money arrive in your own app before you hand anything over. If you take cash, count it in front of the buyer.
- Never scan, approve or enter your PIN or an OTP for anything the buyer sends, whatever the reason given.
- No meeting, no sale. If the buyer genuinely can't come, the sale doesn't happen. Don't hand over or post the item on the promise of payment.
- Prepare the device before you meet. Sign out, remove it from Find My or your Google account, and erase it, so the buyer isn't locked out later. The before-you-sell checklist walks through each platform.
- Write a simple receipt with the date, price, IMEI or serial and both names. See selling a used phone privately for what to include.
If you have already scanned a code or paid
- Stop. Don't scan "one more" code to get a refund. That is how small losses become large ones.
- Call 1930 immediately. The Press Information Bureau describes it (October 2025) as the national cybercrime helpline that helps victims of online financial fraud report quickly and, where possible, get fraudulent transactions frozen. The sooner you call, the better the chance.
- File a complaint at cybercrime.gov.in, the National Cyber Crime Reporting Portal run by the Indian Cyber Crime Coordination Centre under the Ministry of Home Affairs.
- Call your bank using the number on your card or the bank's official app, tell them what happened, and ask what they can block.
- Keep the evidence. Save the chat, the buyer's profile and phone number, the QR code image, screenshots he sent, and the transaction reference numbers from your UPI app.
- Report the profile to the marketplace so the account can be removed.
- You can also lodge a complaint at your local police station, which is what the Delhi Police guidance suggests.
If you were only approached and didn't lose anything, you can report the number through Chakshu on the Sanchar Saathi portal, the Department of Telecommunications' channel for suspected fraud calls and messages. Chakshu itself says anyone who has already lost money should use 1930 or cybercrime.gov.in instead.
Where OwnVouch fits
To be upfront: a device registry does not stop payment scams. OwnVouch can't verify who a buyer is, confirm that a UPI payment is real, or get money back. The protections above are the ones that matter here.
What OwnVouch does is keep an honest record of a device. A genuine buyer can type your phone's serial or IMEI into the public lookup, free and without an account, and see whether it is registered and whether it is flagged lost or stolen. It never shows your identity. In the app, which is in closed beta (you can request a place), a handover only moves the record when seller and buyer both confirm on their own phones. That fits the same habit that keeps you safe: meet, check, then confirm.
Sources
- Delhi Police cyber cell: OLX / QR code fraud
- Reserve Bank of India: BE(A)WARE, a booklet on the modus operandi of financial fraudsters
- Press Information Bureau: Curbing Cyber Frauds in Digital India (8 October 2025)
- Ministry of Home Affairs: National Cyber Crime Reporting Portal
- Department of Telecommunications, Sanchar Saathi: Chakshu, report suspected fraud communication
- Deccan Herald: Online fraudsters cheating people with QR code transaction arrested, 200 cases solved (February 2020)
- The News Minute: Duping buyers across India posing as army officers on OLX, TN cops crack scam (2020)
- US Federal Trade Commission: Selling stuff online? Here's how to avoid a scam