ExFunCity News | Beware of QR Code Scam Malaysia Cases

QR code scam Malaysia cases are becoming a growing concern as scammers increasingly use QR codes to redirect victims to fake websites, fraudulent payment pages and malicious applications. According to the Royal Malaysia Police (PDRM), more than 5,000 QR code scam cases were recorded between January and June 2026, involving approximately RM28.67 million in losses.

The scam method is commonly known as “quishing”, a combination of QR codes and phishing.

Latest Update

PDRM says scammers are increasingly using QR codes to disguise malicious links and trick victims into providing banking information or approving transactions without realising where their money is going.

A QR code scam Malaysia case can take several forms. Victims may receive a QR code claiming to come from a government agency, bank, police officer or legitimate organisation.

Scammers may also use fake payment QR codes to redirect money to accounts they control.

Because a QR code hides the destination link until it is scanned, victims may not immediately notice anything suspicious.

How Quishing Works

A common quishing method sends victims to a fake website designed to look similar to an official page.

The page may then request:

• Online banking usernames or passwords
• Bank card information
• TAC or OTP verification codes
• Personal identification details
• Approval for an unexpected payment

PDRM has warned that QR codes can be used to redirect users to fake websites, payment gateways or applications.

Four Things Malaysians Should Check

To reduce the risk of becoming another QR code scam Malaysia victim, check these four things before continuing.

1. Check the website address after scanning

Look carefully at the URL before entering any information. A suspicious spelling, unusual domain or unfamiliar webpage can be a warning sign.

2. Never give away sensitive banking information

Be cautious if a QR code leads to a page asking for passwords, card information, TAC codes or other sensitive details.

3. Businesses should regularly inspect payment QR codes

Retailers using physical QR payment displays should check them regularly to make sure they have not been covered or replaced by another code.

4. Verify anyone claiming to be an authority

If someone claiming to represent the police, government or another official organisation tells you to scan a QR code for “verification”, independently contact the organisation through its official channel before taking action.

What Malaysians Are Talking About

The sharp increase in quishing cases shows how ordinary payment technology can also be misused by scammers.

PDRM reported that more than 5,000 cases were already recorded during the first six months of 2026, making QR code scam Malaysia awareness increasingly important for both consumers and businesses.

Anyone who believes money has been transferred to a scammer should immediately contact their bank and the National Scam Response Centre at 997. PDRM has urged victims to act quickly so suspicious transactions and accounts can be addressed as soon as possible.

More latest news, entertainment buzz and Malaysian trending stories are on ExFunCity Telegram.