How to verify a payment QR safely
A practical pre-payment checklist for recipient identity, amount, notes, tampering, and banking-app confirmation.
A payment QR reduces typing but does not remove the need to verify the transaction. The bank’s confirmation screen—not the printed label—is the final source of truth before authorization.
Check the destination
After scanning, compare the recipient name displayed by the banking app with the person or business you intend to pay. Stop if the name is missing, unexpected, abbreviated beyond recognition, or different from a trusted invoice. Ask the recipient through a known contact channel rather than a phone number printed next to a suspicious code.
A QR label can be replaced by another sticker. In public places, inspect the edges and compare the destination with an official menu, invoice, or point-of-sale display.
Check every editable field
Confirm currency, amount, reference, and transfer note. A prefilled amount is a convenience, not a guarantee. For invoices, compare it with the original total. For optional-amount codes, enter the value carefully and review it again on the final bank screen.
- Do not approve a test transaction merely to see whether the QR works.
- Never share an OTP, PIN, recovery code, or banking password with a QR generator.
- Do not continue if scanning opens an unexpected login page.
- Prefer official banking applications over unfamiliar scanner apps for payments.
Understand QRpilot’s boundary
QRpilot creates supported payload formats locally. It does not query bank databases, process a transaction, confirm recipient ownership, or receive a payment status. Those limitations are intentional: the generator can validate formatting, while the regulated payment provider confirms the transaction.