Malaysians lost RM28.67 million due to QR code fraud in the first six months of 2026. In addition, fraud involving QR codes also jumped from 223 in 2023 to 655 in 2024 and then 5907 cases in 2025. Losses also jumped from RM4.59 million in 2023 to RM40.85 million in 2025.
QR codes are used to hide malicious links, redirect payments, or steal banking information. The fraud technique using QR codes is now called “Quishing”. The highest number of cases was recorded in Selangor followed by Johor and Kuala Lumpur. The increase in QR code fraud cases is closely related to the use of digital transactions, e-commerce, and cashless payments which are now increasingly used by the public.
The Royal Malaysian Police (PDRM) reminds the public to be careful before scanning QR codes, especially those sent by unknown individuals or accompanied by urgent requests such as payments, gifts, or account verification.
