Scammers print their own QR code and stick it over a shop's or a donation box's real code, or send a "payment QR" in chat.
Check before you pay
- Your banking app shows the recipient's name after scanning. It must match the business. A personal name on a shop's QR is a red flag.
- Feel the sticker: an overlay on top of another sticker is suspicious.
Investigate a QR
Upload a photo or screenshot to the QR / Barcode Decoder. For DuitNow / EMVCo codes it shows:
- the payment scheme (DuitNow, bank, e-wallet);
- the merchant or account name and city;
- whether the amount is fixed (dynamic QR) or open (static QR);
- a CRC checksum check, since hand-edited codes often fail it.
Use the recipient details with PDRM Semak Mule and report to 997 if money was lost.