The QR Code on the Counter: A Small Merchant's Defence Against Payment Fraud

A sticker can become a vulnerability A QR code next to a till can speed up payments, but a criminal could replace a printed code with one that directs customers to another payment destination. The merchant might continue serving customers while expecting funds that never arrive.

Inspect the physical code Check printed or displayed codes when opening the shop and after busy periods. Use a tamper-resistant display where practical. A code that looks unusual, covers another sticker or unexpectedly opens an unrelated website needs investigation.

Verify payment on your side Never release expensive goods solely because a customer shows a payment screenshot. Check the authenticated merchant application, transaction feed or official confirmation channel. Establish a procedure for delayed notifications so frontline staff know when to pause.

Train every shift Show staff the difference between a valid transaction and a message that merely imitates one. Give them a safe escalation path when a customer says money has been sent but the merchant system does not confirm it.

Separate roles and reconcile Where possible, restrict who can replace payment codes or change receiving account details. Compare expected transaction totals against provider records daily and investigate unexplained gaps promptly.

Protect the customer relationship If tampering is suspected, remove the code, notify the provider, preserve evidence and explain the issue without exposing customers' personal data. A calm documented response can prevent a technical incident becoming a trust crisis.