The QR code payment swap
A sticker over the legitimate QR redirects payment to the scammer's account. Most-documented in China, Singapore, Thailand, India. Field guide: how the scam works, how to spot it in five seconds, and what to do if you fall for it.
Also called: QR sticker scam, Payment redirect scam.
How the scam works
Restaurants, parking meters, and shops increasingly display QR codes for payment (Alipay, WeChat Pay, PayNow, UPI). A sticker is placed over the legitimate code, redirecting your payment to the scammer. By the time the merchant notices the cash flow drop, days of payments have been diverted. Reported in China since 2023 and now spreading to Singapore, Thailand, and India.
How to spot it in 5 seconds
- A QR sticker that looks "fresh" or recently applied (corners not yet curled, no dust)
- The merchant does not have a clear receipt or confirmation system
- Other customers are also confused about the QR location
- The QR scans to a private account name rather than the business
- Display screen shows a different amount or merchant than the one you ordered from
What to do if you fall for it
- Check the destination account before confirming payment — your app will show recipient name
- If the recipient does not match the business, abort and pay in cash
- For parking meters: report to local council; many city councils refund verified scam payments
- Banks may dispute QR scam payments if reported within 24h — try
Frequently asked questions
Where is the The QR code payment swap most common?
The The QR code payment swap is most-documented in China, Singapore, Thailand, India, Turkey. Reports come from FCDO and US State Department advisories, embassy briefings, and Warnely's editorial team. The scam can happen anywhere these patterns repeat — watch for the warning signs above regardless of country.
Is this scam dangerous or just annoying?
This scam is medium-risk: you might lose €20-200 or your phone, but it rarely escalates to physical harm. Block bank cards quickly and file a police report for insurance purposes.
What should I do if I am being scammed right now?
Step away from the situation if safe. Walk to a busier, public, well-lit area. If you have been robbed: block bank cards via your banking app within minutes. If you have been physically threatened: call the local emergency number (varies by country — see the country guide) and your embassy. Most embassies operate 24/7 emergency lines.
Will my travel insurance cover this?
Most travel insurance policies cover theft and fraud if you file a police report within 24 hours and provide the report number when claiming. Card fraud is usually reversed by your bank if reported promptly. Spiked-drink medical costs are typically covered as medical emergencies. Always check your specific policy before travel.