Food delivery cyber frauds on the rise

As online food ordering becomes a routine part of urban life, cybercriminals are finding new ways to exploit customers who rely on digital payments and app-based deliveries. Investigators say fraudsters are increasingly posing as delivery partners or customer support staff to trick users into revealing sensitive information.

Cybercrime officials say the scam often begins soon after a customer places an order through a food delivery app. The victim receives a phone call from someone claiming to be a delivery agent or support representative, sometimes using convincing details such as the customer’s name or order amount.

The caller then claims there is a problem—such as an “app glitch,” a cancelled order, or a delivery issue—and offers to resolve it. The victim is asked to scan a QR code, click a link, share an OTP, or make a payment.

Instead of receiving money, the customer unknowingly authorizes a transfer from their own account.

Authorities say several variations of this fraud have surfaced. One common tactic is the “Cancelled Order” scam, where the caller claims the order was cancelled due to a technical issue and promises a refund. The victim is sent a QR code or payment link supposedly to process the refund. When scanned, the transaction deducts money from the victim’s account.

Another trick is the “Double Dip” method. Here, the fraudster manipulates the order status in the app to show the delivery as “undelivered,” triggering an automatic refund. Later, the person arrives with the food and demands payment via UPI or another direct method. Fraudsters also impersonate customer support staff and ask customers to share OTPs or UPI PINs, claiming it is required to fix payment or delivery issues.

Experts say such scams are increasing because delivery apps often share limited contact details between customers and delivery partners, creating opportunities for misuse.

Authorities advise customers to make payments and request refunds only through the official app and never share OTPs, UPI PINs, or banking details over phone calls. Suspicious calls should be reported immediately to cybercrime helplines or the platform involved.