Is the QR Code at Walmart Safe to Scan? Quick Answer

Where Walmart legitimately uses QR codes

Walmart uses QR codes in a few well-defined places. Understanding the legitimate uses makes it easier to recognize anything that falls outside them:

• Walmart Pay. The Walmart app generates a one-time QR code at checkout that the terminal scans to complete your payment. You display the code; you do not scan anything from the terminal. Because the code originates inside the official app and is linked to your stored payment method, it carries no phishing risk.
• Walmart+ membership and Scan & Go. The app also displays QR codes for your Walmart+ membership and for the Scan & Go self-checkout feature. Again, these are app-generated codes you show to store scanners — not external codes you scan yourself.
• Self-checkout payment screens. Some Walmart self-checkout terminals display a QR code on the payment screen as an alternative to tapping your card. When genuine, these resolve to a Walmart-controlled payment URL. The risk here is physical tampering — see below.
• In-store product and promotional signage. Walmart occasionally uses QR codes on shelf tags or promotional displays that link to walmart.com product pages. Legitimate codes always resolve to walmart.com.

The simple rule: any legitimate Walmart QR code destination begins with walmart.com or opens the official Walmart app. A shortened URL, a hyphenated domain like walmart-rewards.net, or any domain other than walmart.com is a red flag.

The two real risks

1. Self-checkout terminal sticker tampering

This is the physical threat. A bad actor places a printed QR code sticker over the legitimate payment QR code displayed on a self-checkout screen. The sticker code leads to a fake payment page that harvests your card details while making it appear you are paying Walmart.

Before scanning any code on a self-checkout terminal: look at the screen surface. A sticker will often have visible edges, slightly raised texture, or slight misalignment with the surrounding screen. If anything looks off, alert a Walmart associate rather than scanning. You can always pay by inserting or tapping your card directly instead.

2. Fake gift card and survey QR codes distributed externally

Walmart's size and brand recognition make it one of the most impersonated retailers in QR code scams. The pattern is consistent: a text, email, social media post, or printed flyer claims you have won — or can claim — a free Walmart gift card or survey reward, and directs you to scan a QR code.

The code leads to a convincing but fake page asking for your name, address, and credit card number — often framed as a small “shipping and handling” fee. Once submitted, your information goes directly to the scammer. This is a variant of the broader fake coupon and promotional QR code scam — one of the most common retail-brand phishing methods.

Red flags that tell you it's a scam

• You never entered a Walmart sweepstakes. Legitimate prize notifications only go to people who opted in. Any unsolicited “you won” message is almost certainly a scam.
• You are asked to pay to claim a prize. Real giveaways never require a shipping fee, handling charge, or tax payment upfront.
• The URL is not walmart.com. Scam pages use domains like walmart-survey.net, walmart-giftcard.com, or similar. None of these are affiliated with Walmart.
• The message arrived unsolicited via text or social media. Walmart does not distribute gift card giveaways through unsolicited texts or QR-code-bearing Facebook posts.

For a deeper look at what happens after scanning one of these codes, see our guide to the Walmart QR code scam.

What to do if you already scanned and something felt wrong

1. Close the page immediately — do not enter any information and do not tap any buttons on the suspicious page.
2. If you entered payment details: call your bank or card issuer immediately to report potential fraud and request a replacement card. Federal law limits your liability for unauthorized charges if you report promptly.
3. If you entered your Walmart.com login: go directly to walmart.com and change your password. Review your account for unauthorized orders or saved payment method changes.
4. If the code was on a self-checkout terminal: alert a Walmart associate immediately so staff can inspect the terminal and protect other shoppers.
5. File a report at reportfraud.ftc.gov — include any screenshots of the scam QR code or the page it opened.

Frequently asked questions