QR Code Scams Rise in Malaysia With $9.4 Million in Losses in First Half of 2026

QR code scams are surging in Malaysia, with losses reaching $9.4 million in the first half of 2026 alone. According to a report by The Straits Times, the rapid adoption of cashless payments across Malaysia and the region has created new opportunities for scammers who exploit the trust consumers place in QR code technology.

As DuitNow QR, Touch 'n Go eWallet, and other cashless payment systems become standard at restaurants, parking lots, and retail stores, criminals have found simple yet effective ways to redirect payments or steal personal information through manipulated QR codes.

Scammers use several techniques to exploit QR codes. The most common method involves placing a fraudulent QR code sticker over a legitimate one at a business premises. When customers scan the code to make a payment, the money goes to the scammer instead of the merchant.

Another variant involves distributing QR codes through phishing messages, social media posts, or flyers that lead victims to fake websites designed to harvest banking credentials. Some scammers also create counterfeit parking payment QR codes that redirect users to phishing sites mimicking legitimate payment platforms.

How common are QR code scams in Malaysia?

QR code scams are growing rapidly. With $9.4 million in losses in just the first half of 2026, they represent an emerging and significant threat as Malaysia moves toward a cashless economy.

How do I report a QR code scam in Malaysia?

Call 997 (NSRC), lodge a police report, report via SemakMule at semakmule.rmp.gov.my. If you made a payment to a fraudulent account, contact your bank or e-wallet provider immediately to attempt a reversal.