A crypto QR code is just text in a picture. That makes it convenient, and it makes it easy to swap. Crypto payments can't be reversed, so knowing the common tricks matters.
Swapped stickers
Someone prints their own QR code and sticks it over a shop's sign or a donation poster. Payments go to them.
Avoid it: shops should check printed codes regularly and print the address in text below the code. Payers should compare the address their wallet shows with the printed text.
Clipboard malware
Malicious software watches your clipboard. When you copy a crypto address, it quietly replaces it with the attacker's, often one that starts with the same characters.
Avoid it: after pasting, compare the beginning, middle and end of the address with the original. Scanning a trusted QR avoids the clipboard altogether.
Address poisoning
The scammer sends you a tiny or zero-value transaction from an address that resembles one you use, with matching first and last characters. Later, you copy that look-alike from your transaction history.
Avoid it: never copy addresses from history. Use your address book or ask the recipient for a fresh QR.
Fake or malicious generators
A dishonest QR generator can show you your address in text while encoding a different one in the image, or route your code through a redirect it controls.
Avoid it: after making a code, scan it with your own wallet and confirm the address it reads. CryptoQR Maker generates codes on your device, makes static codes with no redirects, and shows exactly what the code contains.
"Scan to receive" tricks
A message promises a refund, prize or airdrop if you scan a code. The code opens a website that asks you to connect your wallet or approve a transaction, which hands over access to your funds.
Avoid it: receiving crypto never requires scanning someone else's code, connecting a wallet or signing anything. Only the sender scans.
A quick checklist
- Scan, then read the address your wallet shows.
- Compare it with an independent source (printed text, a message from the recipient).
- Send a small test for large payments.
- Never sign or approve anything to receive money.
See exactly what's inside your code before you share it. Open CryptoQR Maker