Afterpay QR Code Scam: Checkout, Refunds, and Account Verification
A QR code claiming to open Afterpay can be part of a real checkout flow, but it can also be used for fake merchant pages, refund phishing, social marketplace lures, and account verification scams. Verify inside the official Afterpay app or website before approving anything.
How Afterpay QR scams work
- Fake merchant checkout: A QR code on a sign, invoice, marketplace message, or social post opens a page that imitates an Afterpay payment step.
- Refund phishing: A message says a return or refund is waiting and asks you to scan a code to receive money.
- Account verification: A page asks you to log in, confirm a phone number, or add card details before showing the order.
- Off-platform seller pressure: A seller asks you to scan a code instead of using the marketplace or merchant checkout.
This is closely related to payment app QR code scams and fake QR codes at checkout.
The safest way to verify
- Open Afterpay directly. Use the official app or type afterpay.com yourself instead of trusting a QR-scanned login page.
- Match the merchant and order. The checkout, return, or refund should match a purchase you recognize.
- Do not enter new card details for a refund. A random QR page asking for card details to "release" money is a red flag.
- Stay in the official checkout path. Be cautious if a seller asks you to leave the app, marketplace, or merchant site.
If you already submitted information
- Login entered: Change the password directly with Afterpay and review account activity.
- Card entered: Contact the card issuer and monitor for unauthorized transactions.
- Purchase approved: Save the URL, QR image, seller messages, and confirmation screen before contacting support.
- Marketplace seller involved: Report the seller through the platform's official reporting flow.
Frequently asked questions
Can an Afterpay QR code be fake?
Yes. A fake QR code can open a lookalike checkout, refund page, login form, or seller payment request. Open Afterpay directly through the official app or website before entering account, card, or identity details.
Can scanning an Afterpay QR code charge me by itself?
Scanning alone should not charge you. The risk begins if you log in, approve a purchase, enter card details, or submit personal information on the page the QR code opened.
What are the red flags of a fake Afterpay QR page?
Red flags include urgency, an unfamiliar domain, a merchant asking you to leave the normal checkout, a refund page asking for new card details, or a login screen that appeared from an unsolicited message.
What should I do if I entered my Afterpay login?
Open Afterpay directly, change your password, review orders and saved payment methods, contact Afterpay support if anything changed, and monitor the linked card or bank account.
Check QR codes before you open them
QRsafer previews the destination and checks suspicious links before your browser loads the page.