See who a payment QR really pays
A payment QR code holds the account the money goes to. The shop name your banking app shows is only text the code's maker typed in. Scan a code, open a photo of one, or paste its text to see the account, every field in plain English, and anything wrong with it.
What it checks
Where the money goes
Each payment network in the code gets its own card: the Bakong account of a KHQR code, the PromptPay mobile number or ID, the DuitNow QR ID, the VietQR bank and account, the PayNow mobile or UEN, the QRIS merchant ID, or a card network's merchant ID.
Whether it was changed
Every EMV payment code ends with a checksum. If one character was changed after the code was made, the checksum no longer matches. The checksum isn't a signature, though: anyone can make a new, valid code for their own account and print it over a shop's sticker.
Whether it follows the rules
Every field is checked against EMVCo's Merchant-Presented Mode specification: the order, the lengths, the amount's format, the fees, and characters that are invisible or reverse the direction of text and can make a name look like something else.
Payee reads codes; it doesn't pay them or check that an account exists. Before paying an unfamiliar code, check the account with the person or shop you're paying. Examples on this page use made-up accounts, except the DuitNow one, which is PayNet's published test code.