Is this QR code payment scam message a scam?
Commonly seen since 2024. Last reviewed 2026-06-05.
Check your exact messageExample only - do not act on it
Example only: Scan this QR code to receive your refund/payment and confirm your details.
Why this message is suspicious
- You never scan a QR code or enter a PIN to *receive* money.
- QR codes hide the destination, bypassing link checks (quishing).
- Scanning opens a fake payment or login page.
What the scammer wants
- You to scan a code that opens a fake payment or login page
- A payment you think is incoming but actually authorises an outgoing transfer
- Credentials or card details on the page the code opens
Common variations
- Example only: Scan to accept funds - enter your PIN to complete.
- Example only: Pay parking/fees by scanning this code: [fake-link removed]
Red flags to watch for
What to do now
- Don't scan codes from messages or strangers; you never scan to *receive* money.
- Verify any payment inside your official banking/payment app; a QR code is never required to receive money.
- If you scanned and entered details, treat them as compromised and tell your bank.
What not to do
- Do not act on urgency, threats, or authority without verifying independently.
- Do not enter passwords, codes, or card details from a link, popup, or call.
- Do not scan a QR code to 'receive' money or 'verify' an account.
If you already responded
Act quickly - the sooner you respond, the more you can limit. Find the situation that matches what you did:
If you clicked a link: Close the page; don't enter login, codes, or card details.If you entered credentials, change them and enable app-based 2FA.Watch for follow-up 'security' messages - they're part of the scam.
If you paid: Contact your bank or card provider immediately to stop or reverse the payment.Keep evidence (screenshots, references) and report it to your cybercrime authority.Don't pay anything further to 'fix', 'refund', or 'recover'.
If you shared a code, OTP, or login: Never share a one-time code, even with 'support' or a familiar-sounding caller.If you shared one, secure that account and enable app-based 2FA now.Tell your bank if the code related to a payment or banking login.
If you only clicked the link but entered nothing: close the page, don't enter anything, and watch the linked accounts for unusual activity. Full steps →
If you entered card details: contact your bank now to freeze the card and dispute charges, then watch your statement. Full steps →
If you shared an OTP or one-time code: the scammer may be logging in right now - change the password, sign out other sessions, and turn on app-based 2FA. Full steps →
If you sent money: contact your bank or payment provider immediately to try to stop or recall it, and report it. Full steps →
If you installed an app / gave remote access: disconnect from the internet, uninstall it, and change key passwords from a different, trusted device. Full steps →
If you shared passport, ID, or KYC documents: watch for identity theft, consider a credit freeze or fraud alert, and keep the evidence. Full steps →
Watch out for a second scam. People who've just lost money are often contacted again by a fake "recovery" service promising to get it back for an upfront fee. Legitimate recovery never starts with a fee paid to someone who contacted you - see recovery scams.
First time dealing with this? Start with the first 24 hours after a scam checklist and how to save evidence.
How to verify safely
Verify any payment inside your official banking/payment app; a QR code is never required to receive money.
How to report it
Report through official channels for your country. Use our scam reporting directory to find the right authority, and never use phone numbers or links from the suspicious message itself. If an official link looks outdated, tell us so we can review it.
Official sources checked
- HHS HC3 - QR codes and phishing as a threat (white paper, 2023) High reliability
Government cybersecurity report
-
Law-enforcement alert
Reviewed 2026-06-05. See our methodology for how we select sources.
Related pages
- QR code scam
- Phishing
- Remote access scam
- What to do if you scanned a scam QR code
- What to do if you clicked a scam link
Related platforms
Report in your country
Related terms
Frequently asked questions
Do I scan a QR code to receive money?
No. Receiving money never needs a scan or PIN. A 'scan to receive' request is a scam to debit you.