Venmo QR Code Scam: What It Is and What to Do

How fake Venmo QR codes work

Venmo QR codes at food trucks, market stalls, and small businesses link directly to a Venmo profile. When you scan and pay, the money goes to whoever owns that profile.

That's the opening scammers exploit. They print a QR code tied to their own Venmo account and place it next to — or directly over — the merchant's legitimate code. You scan, pay, and the money lands in a stranger's account. The merchant never sees it.

It happens most often at:

• Food trucks and farmers market stalls where QR codes replace card terminals
• Tip jars and donation boxes at events
• Restaurants and cafes with table-side QR payments
• Pop-up shops and festival vendors

The setup is cheap and fast — a printed sticker and a few minutes. The scam is structurally identical to the fake parking meter QR code attack: both rely on you trusting a physical QR code in a context that feels routine.

What happens when you pay the wrong code

The immediate result is your money goes to a stranger. Venmo treats these as completed peer-to-peer transactions — the platform does not automatically reverse them.

Some fake codes do more damage. Instead of a direct Venmo payment link, they point to a phishing page built to look like Venmo's login screen. If you enter your username and password there, the attacker takes control of your account — including any linked bank accounts or cards.

That second scenario is why checking the QR code's destination before you tap matters so much.

What to do right now

If you think you paid a scam Venmo QR code, act quickly. Every hour matters.

1. Open Venmo and check the recipient. Find the transaction in your history. If the name doesn't match the business or person you meant to pay, that's your confirmation.
2. Request the money back. Tap the transaction and request a refund. The recipient has to approve it — a scammer almost certainly won't — but it creates an official record.
3. Report the transaction to Venmo. Go to Help Center → Contact Us and report it as fraud. Include screenshots and the recipient's username.
4. Change your Venmo password immediately if you entered credentials on any page you reached by scanning the QR code. Do this from a trusted device on a trusted network.
5. File a police report and FTC complaint. Report the scam at reportfraud.ftc.gov and to your local police. Include the physical location of the fake code.
6. Tell the business. Alert the merchant so they can remove the fake code and protect other customers.

For a complete recovery walkthrough, see what to do if you scanned a suspicious QR code.

How to protect yourself before you scan

The best protection is a URL check before you pay anything. A few seconds of verification is the difference between a smooth transaction and an hour on the phone with your bank.

• Scan with QRsafer first. It checks the destination URL against multiple threat intelligence sources and returns a Safe, Risky, or Dangerous verdict before you open anything.
• Verify the Venmo username. The QR code should take you to a Venmo profile. Confirm the username matches the business name before you send money.
• Look for physical signs of tampering. A sticker placed over another sticker, raised edges, or a code that doesn't match the surrounding printed material are all red flags.
• When uncertain, skip the QR. Ask the merchant for their Venmo handle and search for them directly in the app — or pay with cash.

For a broader guide to spotting suspicious codes before you scan, how to spot a malicious QR code before you scan covers the visual and contextual signals that matter most.

Frequently asked questions