Indonesia is a top destination for Indian travellers, and its digital payment network, QRIS, offers incredible convenience. But as you scan your way through Bali's markets and cafes, be aware: scammers are targeting this popular system.
Understanding the QRIS Revolution
Think of QRIS (Quick
Response Code Indonesian Standard) as Indonesia's version of UPI. Launched in 2019 by Bank Indonesia, it unified the country's scattered QR payment systems into one single, interoperable standard. Before QRIS, merchants had to display a confusing cluster of different QR codes for various e-wallets like GoPay, OVO, and DANA. Now, one QRIS code is all a vendor needs, and it works with any supported payment app. This system has been rapidly adopted, with its usage becoming nearly universal in tourist hubs like Bali, found everywhere from high-end spas to streetside coconut sellers. For travellers, this means you can often get by with a single payment app, reducing the need to carry large amounts of cash.
The Sticker Swap: A Simple but Effective Scam
The primary scam targeting QRIS users is deceptively simple and physical. Fraudsters print their own QRIS code, which is linked to their personal account, and paste it directly over a legitimate merchant's code. This 'sticker swapping' is often done in busy environments like cafes, markets, or even at donation boxes in places of worship. Because the fake sticker can look almost identical to the real one, an unsuspecting customer scans it, approves the payment, and sends their money directly to the scammer instead of the shopkeeper. The transaction appears successful on your phone, and it's often not until the merchant realises they haven't received the funds that the fraud comes to light.
How to Stay Safe: Your Pre-Payment Checklist
Vigilance is your best defence. Before you confirm any QRIS payment, take a few seconds to run through a mental checklist. First, physically inspect the QR code. Does it look like a sticker has been pasted over another one? Reputable merchants often have their codes printed on acrylic stands or laminated, which makes them harder to tamper with. Second, and most importantly, pay close attention to your payment app after you scan the code. The app will display the merchant's registered name before you approve the transaction. Does the name on the screen match the name of the shop you are in? If you're at 'Bagus Cafe' but your app shows a payment going to a personal name or an unrelated business like 'Restorasi Masjid' (a real scam case), cancel the transaction immediately.
More Tips for Secure Digital Payments
Beyond checking the merchant's name, a few other habits can enhance your security. Always use payment apps from official, trusted providers and download them only from official app stores. Ensure your transaction notifications are turned on; this provides an immediate record and helps you spot any unauthorised activity quickly. Be wary of using unsecured public Wi_Fi networks for financial transactions; a stable local SIM card is a safer option for maintaining a secure internet connection. While many international payment apps are now compatible with QRIS, it's wise to have a backup payment method, such as a credit card or some cash, especially when travelling to more remote areas where connectivity might be poor or QRIS adoption is lower.
What to Do If You Suspect a Scam
If you realise you've paid the wrong recipient or notice a suspicious transaction, you should act quickly. First, inform the merchant immediately. They need to be aware that their QRIS code may be compromised. Contact your bank or the provider of your payment app to report the fraudulent transaction and see if the payment can be stopped or reversed. While recovering the funds can be difficult, reporting the incident is crucial. It helps banks and authorities track these fraud networks. If you are in a major tourist area, you can also consider reporting the incident to the local tourist police, though your primary point of contact should be your financial institution.
