Square QR Code Scam: What It Is and What to Do
Square QR codes are common at counters, food trucks, markets, pop-ups, and invoices. Most are legitimate. The risk is a code that has been swapped, forwarded, or sent in a fake merchant support message.
Four Square QR scams to know
- Counter sticker swaps: A fake Square payment code is placed over the real code at a register or market booth. Customers pay the wrong account while the business never receives the funds.
- Fake merchant verification emails: A business owner receives a QR code claiming their Square account will be suspended unless they scan and log in.
- Fake hardware, loan, or upgrade mailers: A QR code promises Square equipment, account review, or financing, then collects login or business details.
- Fake Square invoices: A customer receives an invoice with a QR code that looks like a Square payment request but opens a lookalike checkout page.
This overlaps with fake invoice QR code scams and payment-app scams like Venmo QR code scams.
How customers can check before paying
- Look at the physical code. If it is a sticker placed over another sticker or a code that looks different from the rest of the register materials, pause.
- Check the destination domain. A legitimate Square checkout commonly uses Square-controlled domains such as squareup.com or square.site.
- Confirm the merchant name. The checkout page should clearly match the business you are paying.
- Ask staff if anything feels off. A real cashier can confirm the payment method before you enter card details.
What business owners should do
- Inspect payment QR codes at opening, shift change, and closing.
- Laminate or frame codes so tampering is easier to spot.
- Do not scan QR codes from account-suspension emails. Type squareup.com directly instead.
- Reconcile customer receipts against Square transaction history if you suspect a swap.
- Train staff to remove unknown stickers and preserve photos for evidence.
Frequently asked questions
Can scanning a fake Square QR code steal my card automatically?
No. The scan alone does not expose your card. The risk starts if you enter card details, log in, or approve a payment on the page that opens.
What if the business says it never received my payment?
Save your receipt, screenshot the page or URL if it is still available, ask the business to compare the payment to their Square activity, and contact your card issuer if the charge went to the wrong merchant.
Are Square invoices safe?
Many are legitimate, but verify the sender, the domain, and the reason for payment. Do not pay an invoice you did not expect just because it uses a recognizable brand name.
How can QRsafer help?
QRsafer lets you preview the destination and checks suspicious links before your browser opens the checkout page.
Preview payment QR codes before checkout
QRsafer checks the destination before a payment page loads, helping you avoid fake checkout and invoice pages.