OLX army officer scam: what it is and how it works

By Advocate Panchanand Shaw, Bar Council of West Bengal · Published 2 Nov 2026 · Online fraud

The OLX army officer scam is a fake-buyer fraud in which someone poses as a serving army officer, shows interest in a listed item and then sends a QR code or payment request that debits the seller. No genuine buyer needs the seller to scan a code to receive money. Report it to 1930 at once; Sections 66D of the IT Act, 2000 and 318 of the BNS, 2023 apply.

The OLX army officer scam is a fake-buyer fraud. A person posing as a serving army officer contacts a seller on OLX, expresses interest in the listed item and then uses a payment trick to take money from the seller instead of paying for the goods. The usual device is a QR code or a request-money link sent on WhatsApp. The fraudster says the seller must scan the code or approve the request to receive the payment. In reality, scanning a QR code or approving a request authorises a debit from the seller's account. The loss is immediate and the buyer disappears.

This is not a problem with the OLX platform itself. It is a social-engineering fraud that uses the platform to find a seller and then moves the conversation to a private channel where the payment can be manipulated. The legal characterisation is cheating by personation using a computer resource under Section 66D of the Information Technology Act, 2000, and cheating under Section 318 of the Bharatiya Nyaya Sanhita, 2023. A victim should report to 1930 and the cyber crime portal immediately, then tell the bank in writing.

Who the fraudster pretends to be

The story is built to explain why the buyer cannot meet in person. The fraudster claims to be posted in a remote border area, a field unit or a peacekeeping mission. He may use a rank such as colonel, major or captain, and may send a photograph in uniform or an identity card. The profile picture is often copied from a real officer's social media account. The listing is chosen because it is high-value and easy to discuss: a car, a motorcycle, a laptop, a camera or expensive furniture.

The urgency is part of the method. The fraudster says he needs the item quickly, that his unit is moving, or that a colleague will collect it. He may offer a price slightly above the asking price to make the seller eager. He may ask for the item to be reserved and then introduce a payment step that requires the seller to pay a small amount first, described as a token, insurance, transport or documentation charge. The small amount is the hook. Once the seller pays, the requests grow.

The impersonation also discourages verification. A seller who believes the buyer is an army officer may not ask for a video call, a meeting at the unit or a verification of the identity card. The fraudster relies on that deference. A real army officer buying a used item is subject to the same ordinary rules of payment as anyone else. There is no official army payment portal for classified purchases and no reason for a buyer to ask a seller to scan a code to receive money.

How the scam actually runs

The first contact is usually a chat on OLX or a WhatsApp message quoting the listing. The fraudster says he is interested and asks for photographs, documents or a service history. He then asks to move the conversation to WhatsApp, where the platform's monitoring is weaker. The seller is asked to share a UPI ID or a bank account number. The fraudster says he is sending the payment and then sends a QR code, a request-money link or a screenshot that looks like a successful transfer.

The critical step is the scan. The seller is told to scan the QR code to receive the money. A QR code used in this way is a payment instruction, not a receipt. Scanning it and entering a PIN sends money out. The same trick appears as a request-money notification: the fraudster sends a request for an amount and describes it as a payment. Approving it debits the seller. In a third variant, the fraudster sends a link to a fake payment page that asks for card details, a UPI PIN or an OTP.

After the first debit, the fraudster may claim the payment failed and ask the seller to try again. He may send a fake screenshot showing a larger transfer and ask for a refund of the difference. He may threaten to report the seller to the army authorities if the item is not delivered. Each step is designed to keep the seller responding. By the time the seller checks the bank balance, the money has moved through one or more accounts.

What the law says

Section 66D of the IT Act, 2000 punishes cheating by personation using a computer resource or communication device. The offence carries imprisonment up to three years and a fine up to one lakh rupees. Section 66C covers identity theft, which fits the use of a real officer's name, photograph or identity card. Section 66 covers unauthorised access to a computer resource and applies where the fraudster takes over an account or device.

Under the BNS 2023, Section 318 is the general cheating offence. Section 318(4) covers cheating and dishonestly inducing the delivery of property. Section 316 covers criminal breach of trust, which may apply where money is entrusted for a stated purpose and misappropriated. Section 336 covers forgery, used for fake payment screenshots, fake identity cards and fake army letters. Section 351 covers criminal intimidation, which appears when the fraudster threatens the seller with official action or exposure.

The BNSS 2023 governs the procedure. Section 173 requires the police to register an FIR for a cognizable offence. Section 175(3) allows a magistrate to order an investigation where the police refuse. Section 187 is the private complaint route. Section 35 deals with arrest and its safeguards. Section 480 and Section 482 cover plea bargaining and appeals, and Section 528 preserves the old law for offences committed before the new codes came into force. Section 63 of the Bharatiya Sakshya Adhiniyam, 2023 makes electronic records admissible subject to a certificate from the person in charge of the device or account.

The RBI's directions on unauthorised electronic transactions provide a parallel remedy. A victim can ask the bank to treat the debit as unauthorised and to limit liability under those directions. The bank will examine whether the customer shared the PIN or approved the request. Scanning a QR code and entering a PIN is an authorised transaction in the bank's system, even though the customer was deceived. That is why the police complaint and the bank complaint should be filed together, and why the facts must be described precisely. The bank needs to know that the approval was obtained by deception, not that the customer knowingly transferred money.

What the victim should do first

Stop the bleeding. Disable UPI on the app, change the UPI PIN, remove saved cards and revoke any mandate created during the conversation. If a remote-access app was installed, uninstall it and change the phone's passwords.
Call 1930. Report the exact amount, the UPI reference, the fraudster's number and the QR code or request details. Save the acknowledgement number.
Tell the bank in writing. Send a complaint to the nodal officer with the 1930 acknowledgement and the transaction statement. Ask for the beneficiary account to be frozen. Do this the same day.
File a police complaint. Take the chat, the QR code image, the payment screenshot, the bank statement and the 1930 acknowledgement to the police station. Ask for a receipt under Section 173 BNSS.
Preserve everything. Do not delete the chat, the fraudster's profile, the listing or the call log. Export the WhatsApp conversation and keep the original QR code image.

Red flags and why they matter

Red flag	Why it matters
A buyer asks you to scan a QR code to receive money	Scanning a code sends money out; it never receives money
A buyer sends a request-money notification and calls it a payment	Approving a request debits your account
A buyer claims to be posted in a remote unit and cannot meet	The story exists to prevent face-to-face verification
A buyer asks for a token, insurance or transport payment before collection	Genuine buyers do not ask sellers to pay to be paid
A buyer sends a link to an army payment portal	There is no such portal for classified purchases
A buyer offers above the asking price and creates urgency	Pressure reduces the seller's willingness to verify

What decides the outcome

The first factor is the speed of reporting. A debit reported within minutes can sometimes be stopped before the beneficiary withdraws the funds. A debit reported the next day is usually gone. The second factor is the payment route. A UPI transfer to a verified merchant or a saved beneficiary leaves a clearer trail than a transfer to a newly added account. A QR code scan leaves the beneficiary's virtual payment address, which the police can use to request KYC details.

The third factor is the evidence of deception. A chat where the fraudster says the seller must scan to receive payment, followed by the debit, is strong evidence that the approval was induced by a false representation. A chat that only shows a payment discussion, without the false instruction, is weaker. The fourth factor is the identity trail. A mobile number linked to a KYC-verified account gives the police a real lead. A number obtained with a forged identity makes the case slower.

The fifth factor is whether the fraudster used a real officer's identity. If a serving officer's photographs or name were used without consent, the officer is also a victim of identity theft and may cooperate. The sixth factor is the amount and the number of victims. A single small loss may be pursued through the portal and the bank. A series of connected complaints gives the police a pattern and improves the chance of tracing the account.

Common mistakes

Do not scan a QR code sent by a buyer. Do not share an OTP, UPI PIN, card number or CVV. Do not accept a screenshot as proof of payment; check the bank balance. Do not refund an alleged overpayment before the original credit is confirmed in the account. Do not move the conversation to a private channel before saving the listing and profile details. Do not delete the chat after the fraud, even if it is embarrassing.

Do not confront the fraudster alone or visit an address supplied by him. Do not pay a recovery agent. Do not file only a police complaint and skip the bank freeze request. Do not assume that the OLX platform will refund the money; the platform is a classifieds service and the payment happened outside it. Do not name the person publicly before the police verify the identity, because the photograph may belong to an innocent officer.

When to involve a lawyer

Involve a lawyer when the bank refuses to treat the debit as unauthorised, when the police do not register an FIR, when the amount is large, or when the identity trail leads to a person who can be prosecuted or sued. A lawyer can draft the magistrate complaint under Section 187 BNSS, prepare the electronic evidence certificate under Section 63 BSA, and coordinate the freeze request with the bank. A single small loss may be handled through the portal and the bank without legal help. A case with a disputed payment approval or a repeated fraudster is better handled with advice early. You can read about the firm's criminal defence and complaint work or use the contact page to discuss the facts.

Need help with a cyber crime matter?

Tell me what happened and I will tell you what to file, where, and by when. First conversation is free.

Call +91-9007000603 WhatsApp

Frequently asked questions

What is the OLX army officer scam?

It is a fake-buyer fraud where someone poses as a serving army officer, shows interest in an OLX listing and sends a QR code or request-money link. The seller is told to scan or approve it to receive payment, but the step actually debits the seller's account. The fraudster then disappears or asks for more payments.

Does scanning a QR code receive money or send money?

Scanning a QR code sends money. A QR code is a payment instruction that identifies a payee. When you scan it and enter your UPI PIN, the amount leaves your account. It does not receive funds. A genuine buyer who wants to pay you will send money to your UPI ID; he will not ask you to scan a code.

How do I know the army officer buyer is fake?

Real buyers do not ask you to scan a code to receive payment. Other signs are a refusal to meet or video call, a story about a remote posting, an offer above the asking price, urgency, a request for a token or transport payment, and a link to an army payment portal. Verify independently and never pay to receive payment.

Which law applies to the OLX army officer scam?

Section 66D of the IT Act, 2000 covers cheating by personation using a computer resource, with up to three years imprisonment and a fine. Section 66C covers identity theft where a real officer's name or photograph is used. Section 318 of the BNS, 2023 covers cheating, and Section 336 covers forged documents or screenshots.

What should I do immediately after the money is debited?

Disable UPI, change the PIN and revoke any mandate. Call 1930 and file on cybercrime.gov.in with the transaction reference. Send a written complaint to your bank's nodal officer asking for the beneficiary account to be frozen. Then file a police complaint with the chat, QR code image, payment record and acknowledgement.

Can the bank refund money lost to a QR code scam?

The bank may refund under the RBI's directions on unauthorised electronic transactions, but the fact that the customer entered the PIN makes the claim harder. The bank will examine whether the approval was obtained by deception and whether the customer reported promptly. A police complaint and a precise written account of the false instruction improve the chances.

Is OLX responsible for the scam?

OLX is a classifieds platform, not a payment intermediary in this fraud. The scam moves to WhatsApp or a direct UPI transfer, outside the platform's payment protection. The platform may cooperate with the police by providing listing and account data, but it is not usually liable for a payment made outside its system. The fraudster and the beneficiary account holder are the primary targets.

How long does the police investigation take?

There is no fixed timeline. A freeze request may be answered within days, but tracing a mule account and identifying the fraudster can take months. The speed depends on how quickly the report is made, whether the beneficiary account is KYC-verified and whether there are connected complaints. Follow up in writing and keep the acknowledgement number safe.

Information for general guidance only and not legal advice. Provisions cited follow the Information Technology Act 2000, the Bharatiya Nyaya Sanhita 2023 and the Bharatiya Nagarik Suraksha Sanhita 2023.

Cyber crime lawyer in your city · Bank account freeze help · Contact