Fake Pix QR Code: how to protect your delivery from fraud

Paying by Pix QR Code is convenient — which is why it became a target. In the fake QR Code scam, the customer scans a tampered code and the money ends up in the scammer's account, not yours. The result: the customer swears they paid, you didn't receive it, and everyone is left confused.

How the scam usually works

• Swapped sticker: a fake QR Code is pasted over yours, at the counter or on the packaging.
• QR sent in chat: the scammer poses as you (or hijacks the conversation) and sends a QR that lands in another account.
• Reused static QR: a fixed code is copied and used in another context.

Warning signs

• A recipient name different from your restaurant when confirming the Pix.
• A QR Code on a loose sticker or a forwarded photo, outside the order flow.
• An amount that doesn't match the order.

How to protect your delivery

• Check the recipient name before confirming — it must be your restaurant/business.
• Prefer a dynamic QR, generated per order, instead of a fixed code pasted around.
• Don't use a loose sticker that anyone can swap.
• Tell the customer to pay only inside the order, not via a standalone QR received in chat.

How to guide your customer

Ask the customer to always check the recipient's name before finalizing the Pix. That simple habit defeats most fake-QR scams.

The ultimate defense: a per-order charge

A loose QR and a fixed code are what the scammer exploits. When the charge is generated by the system, per order, with automatic confirmation, there's no sticker to swap and no code to copy — and you know right away that the money came in.

How Quickap helps

In Quickap, payment runs via Mercado Pago, inside the order: the charge is generated on the spot, the customer pays, and confirmation is automatic — Pix lands straight in your Mercado Pago account. No loose QR, no swappable sticker, no "did it go through?"

Create your app for free →