See who a QR code really pays — the payee VPA, name and amount — before money moves.
Decode-only — this tool never initiates payments and never asks for your PIN. Your image never leaves your device.Select image
or drop it here · photo or screenshot · decoded on your device
Decoding…
Decoding happens on your device — just do not close this tab.
Everything happened inside your browser — your image was never uploaded anywhere, so there is nothing to delete.
A QR code is a black box: you point your camera, your UPI app shows a name, you pay. But the name your app shows comes from the code itself — and codes can lie. The sticker-swap scam is brutally simple: a fraudster pastes their own QR over a shop's genuine one, and every customer who "pays the shop" pays the stranger. The defense is equally simple: decode the UPI QR code first, read the raw payload — the payee's VPA (Virtual Payment Address), the payee name, the amount — and check it against what you were told, before money moves.
A UPI QR is just text in a standard format: upi://pay?pa=shopname@okaxis&pn=Shop%20Name&am=150&cu=INR. The pa is the destination — the handle the money goes to. This tool reads that text for you, in your browser, without uploading the image anywhere. It never initiates a payment, never opens your UPI app, never asks for a PIN. It just shows you what's inside the box.
Payee VPA (pa) — the money's destination, like chaiwala@okaxis or 98765@paytm. The "Virtual" means it hides the real bank account — which is also why you can't tell who owns it just by looking. Compare it with a known-good VPA.
Payee name (pn) — whatever the QR creator typed. Useful, but self-declared: a scammer types a trustworthy name too. The VPA is the harder fact.
Amount (am) — often absent. Static shop codes carry no amount (you enter it); dynamic bill QRs do. Absence is normal, not suspicious.
Merchant code (mc) — a category like 5411 (groceries) marking a business code. No code means personal/P2P — fine for paying a person, worth a pause at a shop counter.
Note (tn) and reference (tr) — the memo attached to the payment. Read it; odd notes ("refund", "cashback", "verification") on a stranger's QR are a red flag.
Verifying a shop's sticker. Small shops get their QR stickers swapped. Photograph it, decode here, and check the VPA against the shopkeeper's word — or against your last genuine payment to them.
Marketplace "buyers". Selling on OLX or Facebook Marketplace and the "buyer" sends a QR "to pay you"? To receive money you never scan anything. Decode it here first — you'll usually find it's a collect payload aimed at debiting you.
WhatsApp-forwarded QRs. A QR arrives on chat claiming to be the vendor's. Decode before paying — forwarding is exactly how swapped codes travel.
Your own standee, before printing. Generate a QR for your shop? Decode the final image here and confirm the VPA spelling — one wrong character routes money elsewhere, and you'd never know until customers complain.
Sticker swap. Fake QR pasted over the real one. Decode-and-compare is the direct counter.
"Scan to receive" scam. There is no legitimate flow where scanning a QR or entering your UPI PIN receives money. Both actions send money out. If anyone frames it as receiving, walk away.
Collect-request trick. A "request money" notification dressed up as a refund or cashback. It asks for your PIN — which means you pay them. Never approve an unexpected request.
Fake payment screenshots. A buyer shows "Payment Successful" while nothing arrived. Sellers: verify in your own bank app or SMS, never from their screen.
It can show you exactly what a QR contains — the destination VPA, name, amount, and codes — privately, on your device. It cannot tell you whether a VPA belongs to a trustworthy person (that would need a bank lookup no web page can do), and it will not initiate payments or ask for credentials. Treat the decoded VPA as a fact to verify, not a verdict of safety.
One QR decides where your money goes. Read it before you pay it: decode here, match the VPA, and only then complete the payment inside your own UPI app.
Drop in a photo or screenshot of the QR code. It's read locally — never uploaded.
The UPI payload is extracted: payee VPA, name, amount, note, merchant code.
Compare the VPA with the genuine one. Pay only inside your own UPI app.
Yes. EzySize’s UPI QR Decoder tool is free to use without creating an account. Advertising may appear on this page; the tool remains free to use. Use the controls above and check the result against your requirements.
Upload a photo or screenshot of the QR code here. The tool reads it in your browser and shows the UPI payload inside: the payee's VPA (UPI ID), payee name, amount if fixed, currency, note, and merchant code.
VPA stands for Virtual Payment Address — the handle that identifies who receives the money, like shopname@okaxis or 98765@paytm. It points to a bank account without revealing the account number. This tool shows you the exact VPA encoded in any QR.
It shows you what the QR says — the real destination VPA — which is the key fact fraud hides. But a scammer's VPA decodes cleanly too. The defense is comparison: match the decoded VPA against the VPA you were actually given, character by character.
Never. It only reads QR codes — it cannot initiate payments, open your UPI app, or move money in any way. It will never ask for your UPI PIN or OTP.
No — that is a classic scam pattern. To receive money you never need to scan a QR or enter your UPI PIN; doing either sends money out. Decode the QR here first if you're unsure, and never enter your PIN on a stranger's instruction.
Photograph the sticker and decode it here. Compare the payee VPA and name with what the shopkeeper tells you — or with a previous genuine payment to the same shop. A swapped sticker shows a stranger's VPA.
Yes — most shop QRs are static codes with no fixed amount; you enter the amount while paying. Only dynamic QRs (bills, invoices) carry a fixed amount in the code.
A merchant category code (like 5411 for groceries) marks the QR as a business rather than a personal account. Its absence means a personal/P2P code — fine for paying a person, worth a second thought at a shop counter.
The QR decoded successfully but doesn't contain a UPI payment payload — it's a website link, plain text, Wi-Fi code, or another payment system. Don't try to pay from it as UPI.
No — decoding happens entirely in your browser. The image never leaves your device.
This page decodes uploaded images only. On your phone, photograph the QR and upload the photo — or screenshot it if it arrived on chat. A clear, straight-on shot works best.
Yes — free, no sign-up. Decode as many QR codes as you like.