UPI Link Decoder: Read a QR or Payment Link
Paste a payment link or the text of a QR code and the decoder shows who would be paid, how much, and what the note says, then lists anything odd. It never contacts anyone and cannot tell you whether a payee is honest.
What is inside a UPI link
A UPI payment link, or the text a QR code holds, is a web-style address that starts upi://pay? and is followed by parts joined with &. Each part has a short name. pa is the payee’s UPI ID, the thing that gets the money. pn is a name, am an amount in rupees, cu the currency, tn a note and tr a reference such as a bill number. Shops add more, such as mc, a four-digit code for the kind of business.
Other payment apps sometimes use their own prefix instead of upi://, and the decoder reads those the same way. A QR code in the Bharat QR format, which starts 000201, is not a upi:// link, so the decoder says so instead of guessing.
The decoder splits the link into those parts, explains each in plain words and writes one sentence you can act on: scanning this would ask your UPI app to send this much to this payee. It reads text only. It never contacts a bank, an app or anyone else.
How to use it
- Get the text without paying. Many QR scanner apps show it with a copy or share option before they open a payment app. A link in a chat can be copied by holding it down.
- Paste it into the box above. A whole message is fine, because the decoder looks for the link inside it.
- Read the sentence first, then the list headed Worth a second look, then the table of parts.
- Before you pay, compare the name your UPI app shows on its confirm screen with who you meant to pay.
A worked example
The page opens on an invented link: pa=refund.desk@ybl, pn=Order Refund Desk, am=4999 and the note “Refund claim”. The decoder says scanning it would send ₹4,999 to “Order Refund Desk”, and finds two things: the UPI ID is dressed as a service desk (30 points) and the note talks about money coming in, on a link that sends money out (30 points). Together that is 60 points, which reads High.
Two other invented links show the range. A shop’s bill with an ordinary UPI ID, a name, an amount and an order number scores 0 and reads Low. A link with the ending @okhdfcbnk, one letter off a real bank ending, scores 35 and reads Medium. Under 20 points is Low, 20 to 49 is Medium and 50 or more is High.
What it looks for
| Sign | Points |
|---|---|
| The same part repeated with different values | 60 |
A request that takes money from you (collect) | 55 |
| A company-style name on a mobile-number UPI ID | 35 |
| A bank ending with one letter changed | 35 |
| A UPI ID dressed as a service desk, or money-coming-in words in the note | 30 each |
A standing instruction for repeat payments (mandate) | 30 |
| A very large sum (₹1,00,000 or more), or a UPI ID that is not in the form name@bank | 30 each |
| A web address attached to the payment | 15 to 45 |
| A link or phone number in the note, an odd currency, an unusual action word | 20 each |
| An amount that is not a normal rupee figure | 25 |
| A large sum (₹10,000 or more) | 15 |
| No payee name | 10 |
A fixed amount, a missing amount and a shop’s extra fields appear as plain notes, with no points.
Two things no flag can show you
First, the name in a link is just typed text. Compare it with the name your UPI app shows when you confirm. Second, receiving money never needs a scan, a link or a PIN. Every one of those only sends money out. A buyer who sends a QR code “to receive your payment” is asking you to pay.
What it cannot tell you
A Low result means nothing odd showed up in the text. It does not mean the payee is honest, and it cannot see a sticker swapped over a shop’s real QR code. If you have already paid someone you now doubt, call your bank straight away to block the UPI ID, then call 1930, the national cyber-fraud helpline, and report it at cybercrime.gov.in. What to do after a scam lists the steps in order. For a message that arrived with the link, the scam message checker reads its words, and the link checker reads ordinary web addresses. See all the free tools.
Common questions
Can the decoder tell me whether a UPI ID belongs to a scammer?
No. It reads the text of the link and nothing else, so it cannot see who owns a UPI ID or whether they are honest. It can show that a link has the habits of a trick, such as a fake refund note on a payment. The name your UPI app shows on its confirm screen is the better check.
Why does the name in the link not count for much?
Whoever makes a link or QR code types the name into it, and nobody checks it. Most UPI apps show a name on the confirm screen that comes from the bank’s records for that UPI ID. If the two names differ, stop, and do not enter your PIN.
Do I ever need to scan or enter a PIN to receive money?
No. A UPI PIN is for sending money, and scanning a code or approving a request also sends it. If a buyer, a “refund desk” or anyone else says you must scan or enter a PIN to get paid, they are asking you to pay them.
What is a collect request, and why is it in the list?
A collect request asks your account to pay. It appears inside your UPI app, not as a link, and approving it takes money from you. The decoder flags a link that asks to collect, because the sender may call it a payment to you.
How do I get the text of a QR code without opening it?
Many QR scanner apps show the text with a copy or share option before they open anything. If yours jumps straight to a payment app, close it, and use the copy or share option in another scanner. Never approve a payment just to see what a code says.
Does the decoder keep the links I paste?
No. It is code running in your browser. The text you paste is read on your device and sent nowhere, so nothing is stored, logged or looked up.