QR Code Payment Scams in Sri Lanka – What You Must Know
Educational guide on protecting yourself from QR code payment scams.
This article is for educational purposes only. QR code scams are growing as more Sri Lankans use mobile payments.
How QR Code Scams Work
The typical scam flow:
- Scammer creates a fake QR code linked to their account
- Code is placed at: Bus stops, store windows, printed on fake bills, or sent via message
- You scan thinking it's legitimate (retailer, bills, etc.)
- You're directed to enter payment details
- Money goes to scammer's account instead of legitimate recipient
Real Sri Lankan QR Code Scam Examples
Example 1: "Bus Fare Payment"
- Fake QR code stickers placed on bus windows
- Passengers think it's the official fare payment method
- Payments go to scammer's account
Example 2: "Utility Bill Payment"
- Fake electricity/water bill sent via email with QR code
- Looks identical to official bill
- Payment goes to scammer instead of utility company
Protection Strategy
Stay safe with QR codes:
- Verify the context before scanning (is this from a known business?)
- Check the URL after scanning before entering payment details
- Never scan QR codes from suspicious locations or sources
- Use official apps for bills (LECO, water board, etc.)
- If the URL looks odd, cancel immediately
- Verify via another method (call the business, check their website)
Frequently Asked Questions
How do I know if a QR code is safe to scan?
Scan only QR codes from trusted sources (official websites, recognized businesses). Always verify the URL after scanning before entering details.
Can my phone get hacked by scanning a bad QR code?
Scanning alone is safe. The danger is in what happens after—fake payment pages or malicious links you're directed to.
What if I scanned and saw a suspicious URL?
Close the browser immediately without entering details. Monitor your bank accounts for suspicious activity.
Are QR codes used by legitimate Sri Lankan businesses?
Yes, many restaurants, stores, and services use QR codes. Always verify them by checking the business's official website or calling them.
How do I report a fake QR code?
Report to Cyber Crime Division, the business being impersonated, and take photos/note the location for authorities.