Last updated: October 28, 2026
A crypto QR code scam tricks you into scanning a code that sends your payment to the attacker's address or opens a phishing site that steals your wallet. Common versions are stickers placed over real QR codes, fake payment requests in chats, malware that replaces the QR shown on screen, and "scan to claim" offers. The fix is simple: after scanning, always check that the address and amount in your wallet match the ones from the real source before you press send.
- 1 scan = a full address you can't read by eye
- 3 checks before sending: address, network, amount
- Irreversible once sent
- 0 reasons to scan unsolicited codes
How crypto QR code scams work
| Scam | How it works | Defense |
|---|---|---|
| Sticker over a real code | A fake QR is pasted over a donation box, shop or ATM code | Look for stickers; confirm the address with the owner |
| Fake payment request | A "seller" or "friend" sends a QR in chat with their own address | Confirm through a second channel |
| Screen or clipboard malware | Malware swaps the QR or the copied address on your device | Compare the address in your wallet with the original |
| "Scan to claim / connect" | The QR opens a phishing site or a wallet-connect prompt | Never connect your wallet from a random QR |
| Fake exchange deposit page | A lookalike site shows its own deposit QR | Only use exchanges reached from a trusted link |
Check these three things before sending
- Address — compare the full address, or at least the first and last 6–8 characters, with the source you trust. Scammers also create lookalike addresses — see address poisoning.
- Network — a QR can encode an address for a different chain than you expect. Check that USDT is TRC20 or ERC20 as intended — sent to the wrong network?
- Amount and memo — payment QR codes can pre-fill amounts and memos. Make sure they match the invoice — memos and destination tags.
QR codes on instant exchanges
When you start a swap, the exchange shows a deposit address and usually a QR code. That's normal and safe if you're on the real site. Reach exchanges through a trusted source — every listing on notkyc links to the official domain — and check the address shown in your wallet after scanning matches the one on the order page. If you're on your phone, see how to swap crypto on a phone. Not sure a site is real? Check is it legit and how to spot a fake exchange.
Signs your device may be compromised
- The address in your wallet changes between scanning or pasting and sending.
- QR codes on known sites look different from what others see.
- Your wallet asks for permissions you didn't expect after scanning.
If so, stop using the device for crypto, move funds from a clean device, and treat your seed as exposed — what to do.
Frequently asked questions
Can scanning a QR code steal my crypto by itself?
Scanning alone doesn't move funds. The danger is what follows: sending to the wrong address, or connecting your wallet and signing something on a phishing site.
Are QR codes on exchange deposit pages safe?
Yes, if you're on the real exchange. Check the domain and compare the address in your wallet with the one shown on the order page.
Someone sent me a QR to receive a payment. Is that normal?
No. To receive crypto you share your address; you don't need to scan anything. A QR that "receives" money usually opens a drainer or sends your funds out.
How do I check a QR code before sending?
After scanning, read the address, network and amount your wallet shows and compare them with the original source. Don't rely on the QR image itself.
Can I get crypto back after sending it to a scam QR?
Usually not. Report it quickly — how to report a crypto scam — and ignore "recovery" offers, which are another scam.
Swap safely without accounts on /swap, for example USDT → XMR, and read is it safe to share a wallet address. No account, no ID, no logs.