How do I extract a UPI ID from a QR code?

Upload the QR image to a reader that decodes it in the browser, or point your phone's built-in camera at it and read the URL preview without opening it. Both reveal the upi://pay link containing the UPI ID.

Can I find out who owns a UPI ID?

Not from the QR code. The name inside a QR is typed by whoever created it and is not verified. The only trustworthy name is the one your UPI app shows on the payment confirmation screen, which comes from the bank record.

Is it safe to scan an unknown QR code?

Scanning alone does not move money — a payment needs your UPI PIN. The danger is a QR that leads to a phishing page, or a scammer convincing you that scanning will credit you. Nothing you scan can ever pull money into your account.

← All guides Guide · Getting paid

How to get a UPI ID from a QR code

A QR code is just text drawn as squares. Reading it back is easy — the useful part is knowing what the decoded text actually proves.

Three ways to do it

1. Decode the image in your browser

Upload or paste the QR into the UPI QR reader. It decodes on your device, shows the UPI ID plus any name, amount and note, and never uploads the image anywhere. Best when you have a screenshot or a photo.

2. Use your phone camera without paying

Most phone cameras detect a QR and show the decoded URL as a preview notification. Read the preview and simply do not tap it. You will see the upi://pay?pa=… string, UPI ID and all. Best when the code is physically in front of you.

3. Open it in a UPI app and stop

Scanning inside a UPI app shows the payee and, crucially, the verified name from the bank record. Nothing happens until you enter your PIN, so you can back out safely. This is the only method that tells you who the account actually belongs to.

What you get back

upi://pay?pa=someone@okhdfc&pn=Some%20Name&am=499.00&cu=INR

Field	Meaning	Trustworthy?
`pa`	The UPI ID money would go to	Yes — this is the real destination
`pn`	Payee name	No — typed by whoever made the QR
`am`	Amount	Yes, if present
`tn`	Transaction note	Yes, but it is only a label

The name in a QR means nothing

This is the part worth internalising. The pn field is free text set by whoever generated the code. It can say “State Bank of India” while pointing at a personal account in someone else’s name.

UPI apps know this, which is why they ignore pn and display the name registered against the destination bank account instead. That name is verified. The one in the QR is decoration.

So decoding tells you exactly where a payment would go. To learn who is behind it, you have to open it in a UPI app and read the confirmation screen. How this gets exploited →

Why you would want to

Checking before paying — see the destination of a QR sent by someone you do not know.
Recovering your own UPI ID — from an old printed sticker you no longer have the source for.
Copying an ID you cannot select — a QR in an image has no selectable text.
Confirming a fixed amount — check whether a code has an amount baked in, and what it is.

Is scanning an unknown QR dangerous?

Scanning by itself never moves money. A UPI payment requires your PIN, entered inside your UPI app on the NPCI-secured screen. The genuine risks are different:

A QR encoding an https:// phishing page dressed up as a payment screen and asking for your PIN or card details. Real UPI payments never take a PIN in a web page.
Someone insisting that scanning their QR will credit you. That is impossible. Scanning and entering a PIN always sends money out.

Decoding the QR first, without opening it, defuses both. Decode one here →

UPI QR reader — the tool.
UPI handle directory — work out which app and bank a decoded handle belongs to.
UPI QR code generator — the opposite direction.