Malicious QR codes can substitute a fraudster’s payment destination for a legitimate merchant or peer. Victims often notice only when the intended recipient reports non-receipt.
Photograph the QR code in context and save the payment confirmation showing merchant or wallet IDs. Retain any overlay stickers or printed materials that hosted the code.
Notify the payment app or bank with the exact transaction ID and timestamp. Apps may be able to flag receiving accounts faster when identifiers are precise.
If the QR appeared in a business setting, preserve CCTV requests and premises details promptly. Location evidence can matter for both police reports and civil tracing.
Disclaimer: This article provides general information only. It is not legal advice and does not guarantee recovery in any matter.