Payment App QR Code Scam: What It Is and What to Do
Payment QR codes are common at markets, restaurants, events, parking lots, and online marketplaces. A fake code can send money to the wrong recipient or open a phishing page that imitates a payment app. Check the payee before you confirm.
Common payment QR scam scenarios
- Sticker swaps: A fake QR sticker is placed over the real merchant code at a counter, booth, parking meter, or event table.
- Marketplace payment tricks: A buyer or seller sends a QR code claiming you must scan to receive or verify a payment.
- Fake business profiles: The QR code opens a payment app recipient that looks close to the merchant name but is controlled by someone else.
- Lookalike login pages: A QR code opens a web page that imitates Venmo, PayPal, Cash App, Zelle, or a bank and asks for credentials.
For specific app guidance, see Venmo QR code scams, Zelle QR code scams, Cash App QR code scams, and PayPal QR code scams.
What to check before you pay
- Confirm the recipient name. It should match the merchant, vendor, driver, seller, charity, or person you expected.
- Check for sticker tampering. Raised edges, mismatched paper, and crooked overlays are warning signs.
- Open payment apps directly when possible. Search for the recipient inside the app instead of logging in through a QR-scanned web page.
- Avoid urgent off-platform payments. Marketplace sellers and buyers who push QR payment outside the platform are higher risk.
What to do if money moved
- Open the payment app directly and check the recipient, amount, note, timestamp, and transaction ID.
- Try to cancel pending payments immediately if the app allows it.
- Contact the app support team and your bank or card issuer if a linked account was charged.
- Tell the merchant or venue so they can remove the fake code and prevent more payments from going to the wrong account.
Card-form lures are covered in more detail in the QR code credit card scam guide.
Frequently asked questions
How does a payment app QR code scam work?
A scammer places or sends a QR code that opens a payment app, fake login page, or payment form. The victim may pay the wrong recipient, enter credentials on a lookalike page, or share card details outside the real merchant flow.
Can scanning a payment QR code send money automatically?
Usually no. Scanning may open a payment app or payment page, but money normally moves only after you confirm the recipient and amount. The danger is tapping Pay before checking the recipient, or entering credentials on a fake page.
What should I check before paying with a QR code?
Check the recipient name, username, business profile, domain, amount, and reason for payment. If the name does not match the merchant, vendor, driver, seller, or organization, stop and ask them to confirm from their own device.
What if I sent money to the wrong QR code?
Open the payment app directly and try to cancel if the payment is pending. Contact the app support team and your bank if a linked card or bank account was used. Save screenshots, the QR code photo, recipient name, and transaction ID.
Check payment QR destinations first
QRsafer helps preview payment, redirect, and login destinations so you can spot suspicious QR codes before confirming a payment.