QR codes are convenient for crypto payments but can be replaced with scammer addresses. Always verify before scanning.
How QR Code Scams Work
| Stage | What Happens |
|---|
| 1 | Scammer replaces a legitimate QR code with their own |
| 2 | Victim scans the code expecting to pay a business |
| 3 | The QR code contains the scammer’s wallet address |
| 4 | Victim sends crypto to the scammer |
| 5 | Funds are gone — irreversible |
Where Fake QR Codes Appear
| Location | How It’s Replaced |
|---|
| Café or shop | Legitimate QR sticker covered by fake |
| Gas station | Payment QR replaced |
| ATM or kiosk | QR code on machine replaced |
| Conference or event | Sponsor QR replaced |
| Email invoice | QR image in email is fake |
| Social media post | Fake donation QR |
| Physical mail | Letter with fake QR code |
The “Invoice” QR Scam
| Element | Scam |
|---|
| Email | Looks like a legitimate invoice |
| QR code | Links to scammer’s payment page |
| Urgency | ”Pay within 24 hours or service cut off” |
| Amount | Looks reasonable |
| Destination | Scammer’s wallet |
Crypto ATM QR Scams
| Step | What Happens |
|---|
| 1 | You go to a Bitcoin ATM |
| 2 | The machine displays a QR code for your wallet |
| 3 | Scammer has tampered with the machine |
| 4 | You scan the QR — it’s actually the scammer’s address |
| 5 | Your cash goes to the scammer |
How to Protect Yourself
| Rule | Why |
|---|
| Verify the QR destination before sending | Check the address on your phone |
| Cover existing QR codes with your hand | Prevents camera from reading a swapped code |
| Use official payment pages | Type the URL manually, don’t scan |
| Check for tampering | See if a sticker is placed over the original |
| Send a test amount first | Small test to confirm destination |
| Use NFC instead of QR | Less common for tampering |
Verifying a QR Code
| Step | Action |
|---|
| 1 | Scan the QR code |
| 2 | Check the wallet address on your phone screen |
| 3 | Confirm the first and last 6 characters match the expected address |
| 4 | Verify on the business’s official website |
| 5 | Only send after confirmation |
What to Do If You Scan a Fake QR
| Step | Action |
|---|
| 1 | Don’t send the transaction |
| 2 | Leave the location immediately |
| 3 | Report to the business owner |
| 4 | Warn others on social media |
| 5 | Report to Action Fraud if funds were lost |
Bottom Line
QR code scams replace legitimate payment codes with scammer addresses. Verify the destination address on your phone before sending any crypto. Check for tampering (stickers placed over original codes). Send a test transaction for large amounts. Use official payment pages and apps rather than scanning unknown QR codes. A moment of verification saves irreversible loss.
This content is for educational purposes only. Not financial advice. Do your own research before investing.