The QR Code on the Restaurant Table
Photo source: iStock
You sit down at a restaurant and notice a small QR code on the table. Instead of handing you a menu, the staff suggest scanning it with your phone. Within seconds, a menu appears on screen, and you can browse the dishes without waiting.
QR codes have become a familiar part of dining, ticketing, and everyday payments. Most are perfectly legitimate, but a code can also direct you to a fake website designed to collect personal information or payment details.
The difficulty is that you cannot tell where a QR code leads simply by looking at its printed pattern. A fraudulent sticker can be placed over a genuine code, or a code in an unexpected message can direct you to a convincing imitation of a trusted website.
Before opening a link, use your phone’s camera to preview the web address. Look for misspellings, unfamiliar domains, or addresses that do not match the restaurant or service you expect. If anything seems suspicious, ask a staff member to confirm the correct link or request a printed menu instead.
Be especially cautious if a menu website unexpectedly asks you to download an app, enter your banking password or provide personal information unrelated to ordering food. A restaurant menu should not need your online banking credentials.
New Zealand’s cybersecurity guidance warns that QR codes can be used in phishing attempts, directing people to malicious websites, or fraudulent payment pages. CERT NZ recommends treating unexpected links with care and checking where they lead before sharing information.
If you are paying through a QR code, confirm that the business name and payment amount are correct before authorising the transaction. Do not assume a payment page is genuine simply because it opened after scanning a code displayed on a table.
You can also avoid scanning altogether if you feel uncertain. Ask staff for another way to view the menu or settle the bill. A reputable restaurant should be able to explain its process.
QR codes are useful shortcuts, not guarantees of safety. Taking a moment to inspect the destination before tapping through can help you enjoy the convenience without handing information to the wrong people.
