Is Payconiq safe? Recognise fake QR payments and refund scams

What you need to understand

• Recognise fake Payconiq QR codes, invented refunds and payment requests that leave the official app.

The scenario, step by step

• The QR code is presented as necessary to receive money, confirm a refund or verify an account.
• In reality, it prepares an outgoing payment or opens a fake form. The direction of the payment, the amount and the beneficiary are hidden by the fraudster's story.
• On a marketplace, the fake buyer often tries to take the transaction out of the official flow before sending the QR code or the link.

What the fraudster is trying to obtain

• Validation of a payment that the victim thinks they are receiving.
• Bank or card details entered after the scan.

Common variants

• Fake refund.
• Fake marketplace buyer.
• Printed QR code covering a legitimate QR code.

Warning signs in your case

• External QR code
• Unexpected refund
• Payment outside the official app

What a legitimate service would do

• The app shows the amount and the beneficiary before confirmation: these details must be read directly on the screen.
• Receiving money does not require sharing full card details.

Belgian context and fraud chain

• Mobile payments and QR codes are familiar in Belgium. The trap relies on confusion between receiving and sending: the story promises a refund while the screen prepares a debit.
• The QR code is only an information carrier. Its presence on a poster, in a known conversation or under a Payconiq logo does not guarantee either the beneficiary or the amount.

Decision points to check

• Before confirming anything, read the amount, the beneficiary and the direction of the operation yourself in the app.
• To receive a payment, refuse flows that ask for full card details, a code or an external bank login.
• On a marketplace, keep the payment within the platform's official function and ignore the QR code sent by the buyer.

How to check without taking risks

• Do not reply to the message and do not use the link, QR code or number it contains.
• Open the official app or website yourself, then check whether the same request appears in your personal area.
• If in doubt, contact the organisation using a number found on its official website, a reliable invoice or your bank card.

What to do immediately

• Open the official app yourself.
• Do not scan any QR code sent by message.

If you have already clicked, paid or replied

• Stop the exchange and do not try to negotiate with the sender.
• Change the access details that were shared, through the official service. Contact the bank immediately if a payment, card, IBAN or validation is involved.
• Keep the exchanges, payment references and observed addresses for reporting, without sharing personal data publicly.

Reacting after an incident

• If a payment was confirmed, contact the bank immediately with the amount, time and beneficiary shown.
• If card details were entered, ask the bank whether blocking is necessary and use Card Stop when a card is compromised.
• Keep the QR code, the conversation and the destination URL in non-clickable form for reporting.

Limits and level of proof

• A QR code cannot be declared safe or dangerous based on how it looks; its destination and the action it prepares must be analysed.
• The detector can examine the text or the extracted URL, but the final confirmation must be read in the payment app.

Analysis grid for Payconiq fraud

• To review a payconiq fraud case, separate four questions: who makes contact, through which channel, what action is requested and what independent element can confirm it. One reassuring answer does not make up for the other inconsistencies.
• The priority signals in this file are: external QR code; unexpected refund; payment outside the official app. Their combination matters more than the isolated presence of a word, a logo or a typo.
• Always compare the message with the service's real status. For payconiq fraud, a request that is absent from the app, the account or the official contact must remain unexecuted until confirmed.

When to ask for immediate help

• In a payconiq fraud case, contact the service concerned without delay if a code, a validation, a payment, a card, an identity document or remote access has already been shared. Describe the exact action rather than saying only that you were hacked.
• If no sensitive action has been taken, keep the useful elements, block the contact and use the detector to document the signals. This distinction avoids confusing prevention, a confirmed incident and a simple unsolicited message.

What to do now

• If you have not acted, do not click further and open the named service's official channel yourself.
• If you clicked, close the page, enter nothing else and note what information was shown or requested.
• If you shared a code, card, password or payment, contact your bank or the relevant official service immediately.
• Keep the message, time, link used and any useful screenshots. Share them only with an official reporting channel or a trusted helper.

Limits of this page

• This page does not prove that a message is safe and does not replace your bank, the police, Safeonweb, a platform or a public service.
• A scam may be new, very well written or described with too little context. Use the result as decision support, not as absolute certainty.
• Before taking a final action, checking through the official channel matters more than the appearance of the received message.

Check through an official channel

• Type the service address yourself or open the official app. Do not use a phone number, link or QR code from the suspicious message to verify the situation.
• When money, card details, a code or account access are involved, the safety action comes first. The analysis can then help organise the evidence.

How to read the result

• A low number of signals does not mean that everything is safe. It only means that this page or analysis did not find decisive evidence with the information available.
• Focus on the requested action: paying, sharing a code, installing an app, approving a bank action or leaving an official platform. That action matters more than a logo, sender name or polished wording.
• If the situation feels urgent, step away from the received message first. Then check calmly through a channel you already trusted before the message arrived.

Belgian reading of this situation

• For the Payconiq payment request, focus on the relevant Belgian next step: open the official channel yourself, contact the bank, use Safeonweb or preserve evidence.
• The right decision for the Payconiq payment request depends on what has already happened. Reading a message is not the same as clicking, paying, sharing a code or granting remote access.

Frequently asked questions

Useful official sources

• Bancontact Company - Ensemble contre la fraude aux paiements - link checked on 2026-09-17
• Bancontact Company - L'app Payconiq devient Bancontact Pay - link checked on 2026-09-17
• Febelfin - Phishing - link checked on 2026-09-17
• Card Stop - Blocage officiel des cartes de paiement - link checked on 2026-09-17
• SPF Économie - Victime d'une arnaque ? Que faire ? - link checked on 2026-09-17