The QR code stuck to a shop counter and the QR code on a payment page are not the same thing, and the difference explains a whole category of payment mistakes — and one of India’s most effective scams.
Here is how UPI QR codes actually work, when to use each type, how to create your own, and how to tell a legitimate code from a tampered one.
Static QR Codes
A static QR encodes one thing: a UPI ID, and sometimes a merchant name. No amount. You scan it, type the amount yourself, and pay.
Where you see them: printed standees on kirana counters, stickers on autos, laminated cards at market stalls.
Strengths: free, printable, permanent, works forever, needs no device or internet on the merchant’s side.
Weaknesses: the customer can type the wrong amount, reconciliation is manual, and — critically — a printed code can be covered with a fraudster’s sticker.
Dynamic QR Codes
A dynamic QR is generated per transaction and carries the amount, and usually an order reference, already embedded. You scan, check the figure, and confirm.
Where you see them: billing screens at organised retail, restaurant bills, ecommerce checkout pages, petrol pumps.
Strengths: no typing errors, automatic reconciliation against an order, usually time-limited, and far harder to tamper with because they exist only on a screen.
Weaknesses: needs a POS device, app or internet connection to generate.
How to Tell Them Apart
Simple test: scan it. If your app asks you to enter an amount, it is static. If the amount is pre-filled, it is dynamic. Either way, check the merchant name your app displays before confirming — that name comes from the bank account behind the code, not from the printed sign above it.
Creating Your Own QR Code
For personal use
Every UPI app generates one for you already. Open the app, tap your profile or the QR icon, and there it is. You can share the image, print it, or let someone scan it from your screen. It is a static code tied to your UPI ID.
To create a code with a fixed amount — useful for collecting a set contribution — use the Request money or Ask flow instead, which generates a payment link or amount-specific code.
For a business
Options, in rough order of cost:
- Your UPI app’s merchant mode — free, gives you a printable static QR and basic transaction notifications.
- A soundbox from PhonePe, Paytm or a bank — a small rental, and it announces payments aloud, which removes the “did it go through?” conversation entirely.
- A payment gateway — Razorpay, Cashfree and similar, for dynamic QRs tied to invoices. Charges apply.
- Your bank’s merchant service — settlement straight into the current account with the least intermediation.
Which of these makes sense depends on volume; our UPI for small business guide works through the decision.
The QR Sticker Scam, and How to Avoid It
The attack is crude and effective: a fraudster pastes their own QR sticker over a shop’s genuine one. Customers scan, pay, and both they and the shopkeeper only notice hours later.
As a customer: read the merchant name your app shows before you confirm. If it displays a personal name at a shop called something else, stop. Show the shopkeeper your confirmation screen rather than just calling out “done”.
As a merchant: laminate the code, check it every morning, and use a soundbox so a missing announcement tells you immediately.
There is a second and nastier variant: a “QR code to receive money”, sent by someone claiming to be a buyer. Scanning a QR code never receives money — it only sends it. Anyone asking you to scan a code to get paid is stealing from you. This and related patterns are catalogued in our UPI fraud and recovery guide.
Practical QR Rules
- Check the merchant name on every payment. It takes one second.
- Check the amount on dynamic codes — pre-filled does not mean correct.
- Never scan a QR to receive money. There is no such thing.
- Do not scan codes sent by strangers over WhatsApp or on classifieds sites.
- Be wary of codes in unexpected places — parking notices, unsolicited flyers, “pay your fine here” posters.
- Keep a payment record, especially for larger amounts.
Frequently Asked Questions
Can I receive money by showing someone a QR code?
Yes — you show them your code and they scan it to pay you. What you must never do is scan someone else’s code expecting to receive money.
Do UPI QR codes expire?
Static codes do not. Dynamic ones usually expire within minutes.
Is there a charge for accepting QR payments?
Not for standard bank-to-bank UPI as a small merchant. See our guide to UPI charges for the exceptions.
Can two shops use the same QR code?
Technically yes if they share an account, but it makes reconciliation impossible. Use separate codes.
What if I scan a QR and pay the wrong person?
Report it to your bank within three days and file at the cybercrime portal. Recovery depends on the recipient’s cooperation.
The Bottom Line
Static codes are free and permanent but need watching; dynamic codes cost a little and remove most of the risk. Whichever you are scanning, the single habit worth building is reading the merchant name before you press confirm — it defeats the most common QR fraud in India in about one second.
For the full system view, see our complete UPI guide for 2026.
Fold Smith
Fold Smith is a technology journalist and the lead editor of The Techleez, an India-first publication that decodes technology, digital payments, streaming and online culture for everyday readers. From UPI and fintech explainers to OTT streaming guides, Android tips and online-safety checklists, he personally tests the apps, tools and services featured on the site before recommending them. His focus is practical, research-backed guidance that helps Indian readers make smarter digital decisions — spend less, stream better and stay safe online. When he is not writing, he is usually tracking NPCI circulars, first-day-first-show box office numbers, or the next big OTT premiere.
More from this author →
