Nepal’s QR Code ‘Quishing’Scam|

--

QR Code Scams in Nepal: A Growing Financial Crime & Our Call to Action

This is my first post, compelled by an urgent threat I’ve verified.
Every day, hard-earned money is vanishing in seconds from the phones of Nepali citizens — not through hacking, but through a simple ‘scan and pay.’ The very feature designed for convenience — the personal dynamic QR — has become the scammer’s weapon of choice. This isn’t a niche IT issue; it’s a national consumer protection crisis affecting our parents, small vendors, and students.

The New Scam: “Scan for Refund” Steals Your Money
A dangerous new QR scam is circulating. The code is presented with a message like “Scan for Refund” or “Click to claim cashback.” However, when scanned, it does the opposite — it initiates a payment from your wallet to the scammer.

How it works:
Scammers are exploiting a restricted “Pull/Payment Request” QR feature (meant for merchant transactions) to trick users. This isn’t just a scam — it’s a digital financial crime enabled by low awareness.

“Why Nepal is vulnerable:”
Digital leap without literacy.
High trust misapplied to digital interfaces.
Limited, daunting recourse. Recovery is rare.
No safety net. A single scam can devastate.
This is a systemic gap, not user failure.
What We Can Do:
1. For Everyone: “Scan, Pause, Verify”
✅ SCAN the QR.
✅ PAUSE. Don’t rush.
✅ VERIFY THE NAME on the final screen.
✅ Only then PAY.
Never scan a QR promising money. Confirm verbally.
2. If Scammed (Realistically):
Immediately call your bank’s customer service.
File an FIR.
Document everything.
Prevention is critical — recourse is an uphill battle.
3. A Call for Systemic Action:
Banks/Fintechs: Make payee names more prominent. Add clear warnings.
Regulators/Policymakers: Launch a nationwide digital safety campaign.
NGOs/INGOs: Integrate “Digital Transaction Defense” into programs.
Each of Us: Educate family, helpers, shopkeepers.

For example, I recently saw a fake ‘Scan and get refund’ QR designed to look like it was from [popular company]. I’ve blurred the actual code below to prevent accidental scans, but it shows how scammers mimic trusted brands

Digital Nepal must be built with vigilance and collective action, not at the cost of people’s trust and savings.

#Nepal #Fintech #Digital literacy
#cybersecurity #digital awareness

Originally published at https://www.linkedin.com.