QR Code Payment in Vietnam: Scam Checks Before You Scan

QR code payment in Vietnam works best when you treat every code as a bank account number printed as a picture. Scan it, then read the name that appears before you press pay. If the name is wrong, stop.

This guide is for shoppers and for shop owners. It uses plain checks you can run in a few seconds. It is general information, not legal or financial advice.

What a QR code actually holds

A QR code is a square pattern that stores data. A phone camera reads it and turns it back into text. Denso Wave, a Japanese company, announced the format in 1994, and it was approved as an international standard, ISO/IEC 18004, in June 2000.

The code itself is only a container. In a payment, the text inside points to a payee, such as a bank account or an e-wallet account, and sometimes to an amount. The picture does not prove who owns that account. Your app shows you the payee name after the scan. That name is your check.

If your bank app or e-wallet offers scan-to-pay, look at how it shows the payee before you rely on it. Each app has its own screens and wording.

Sources: qrcode.com/en/history, qrcode.com/en/about/standards.html.

Five checks for shoppers before you scan

1. Read the payee name. After the scan, the app should show who gets the money. Compare it with the shop name on the sign or receipt. A personal name for a shop that looks like a company is worth a question.
2. Check the amount. If you type the amount yourself, read it twice. An extra zero is easy to miss on a small screen.
3. Look at the sticker. A code printed on paper and taped over another code is a warning sign. Run a finger over the edge. If it lifts, ask the staff.
4. Ignore codes sent by strangers. A code in a chat message, a text or a social media comment can lead anywhere. Pay only through a shop, site or app you chose yourself.
5. Never scan to receive money. You do not scan a code to get paid. If someone says you must scan to collect a refund or a prize, walk away.

None of these checks takes more than ten seconds. Most bad payments happen because a person is in a hurry and skips the name.

How swapped codes work

The trick is simple. A thief prints a new code that points to their own account. They stick it over the real code on a counter, a table stand or a delivery box. Customers scan it, see a pay button and send the money without reading the name.

The money goes to the thief, and the shop sees nothing. Often the shop learns of the problem only when the till total does not match the bank balance.

A second trick is a fake message. The sender says a payment failed and asks you to scan a new code. Before you do, open your own banking app and look at the real transaction list. Your bank app is the record, not the message.

Five habits for shop owners

1. Print your code in a place you control. Use a stand or frame behind the counter, not a loose sheet on a shared table.
2. Walk the shop every day. Check each code, in each spot, at opening time. It takes one minute. Look for stickers, tape and any edge that is not clean.
3. Confirm each payment on your own phone. Do not accept a customer's screen as proof. Look for the alert in your own banking app or e-wallet before you hand over goods.
4. Put your shop name on the account. If customers see a clear name after scanning, they can match it to your sign. That makes a swap easier to spot.
5. Tell staff what to do. One simple rule helps: no alert on our phone, no goods. Write it down and share it.

Fake screenshots are common. A customer shows a green tick on their phone, but nothing has reached you. A screenshot can be edited, so only your own alert counts.

Keep proof of payment

Save a record every time you pay by QR code. A clear record settles most disputes fast.

• Take a screenshot of the success screen. It should show the amount, the date, the time and the payee name.
• Keep the transaction number. Banks and wallets use it to trace a payment.
• Keep the receipt or the order message from the shop.
• Check your statement at the end of the week and match each QR payment to a purchase.

Shop owners should also log each QR payment against the sale it belongs to. At closing, add up the day and compare it with the account. A gap is the first sign that something is wrong.

If you paid the wrong account

Act quickly. Do not wait for the other side to reply.

1. Contact your bank or e-wallet provider at once, using the number printed on your card or inside the official app. Give the transaction number, the time and the amount.
2. Tell the shop, if the payment was meant for a shop. Ask them to check their own alerts.
3. Report the problem to the police if you think a code was swapped or a message was a scam. Bring your screenshots.
4. Change your app password if you scanned a code from a stranger and then entered your details on a page you did not expect.

No one can promise that money sent to the wrong account comes back. That is why the name check before you press pay matters most.

The short version: scan, read the name, check the amount, keep the proof. Shop owners add one more step: confirm on your own phone.

Sources: qrcode.com, history of the QR Code (Denso Wave); qrcode.com, standards page. The scam checks above are common-sense practice, not rules from a regulator.