Malaysians lost RM28.67 million to QR code scams in the first six months of 2026.
Authorities received 5,134 reports during the period, according to figures provided by Bukit Aman Commercial Crime Investigation Department Director Rusdi Mohd Isa to The Star.
The latest figures bring the total since January 2023 to 11,919 cases and RM80.86 million in losses.
Cases rose from 223 in 2023 to 655 in 2024 before reaching 5,907 last year.
Annual losses increased from RM4.59 million to RM6.76 million and then RM40.85 million over the same period.
Police Trace Funds Through Recipient Accounts
Police investigations extend beyond those who create or circulate fraudulent codes.
Officers also examine the movement of funds and the accounts used to receive them, while coordinating with banks, telecommunications companies and other agencies.
Account holders may face investigation if evidence shows that they knowingly allowed scam networks to use their accounts.
Rusdi said prosecution could extend to organisers, fake website operators, recipient account holders and other facilitators.
QR codes can conceal the destination of a link or transaction.
Scammers may use them to divert payments or lead victims to fraudulent sites that request banking credentials and transaction approvals.
QR-based phishing is commonly known as quishing.
Selangor accounted for the largest number of reports, ahead of Johor and Kuala Lumpur.
Rusdi associated the concentration with the heavier use of online shopping and digital payments in these locations.
The public was advised to check where a QR code came from before scanning it, especially when an unknown sender applies pressure to make a payment or provide account details.
Featured image: Edited by Fintech News Malaysia, based on image by user5027847 via Magnific
