Preview the action before accepting it
A code can open a website, start a message or initiate another action depending on its contents and the scanning application. Read the preview where available. Do not assume every code on a television-service message leads to the same account or plan.
Check the destination hostname or recipient carefully. A short link can obscure the eventual destination, and a payment request can use a recipient identity different from the artwork. If the preview is unclear, stop and obtain the intended destination through a known route.
Reconcile the commercial details
Confirm the intended account, complete term, currency, total payable amount and payment recipient. For this site, the published WhatsApp route is an enquiry path; opening a conversation is not a receipt, payment confirmation or activation.
Do not infer taxes, fees or renewal conditions from a QR image. If the amount or recipient differs from what was agreed, ask for an explanation before proceeding. Retain the actual agreement privately so that the question refers to a concrete selection rather than a generic plan name.
Verify outside the unexpected message
Use the contact you already established or the site's published route entered independently. Replying to the same unfamiliar sender does not independently verify that sender. A claim that the old contact “is broken” is a reason to check, not a reason to abandon verification.
An illustrative case is a message showing the correct brand colour and a new code whose preview points to an unrelated recipient. The mismatch deserves resolution before payment. It does not require scanning the code on several devices or sending account credentials to the sender.
If you already followed the code
Record the destination and what information or action you provided. If you entered credentials, secure the real account through its official route and ask about revoking affected access. If you authorized a payment, consult the actual payment provider's transaction and reporting process promptly.
Do not claim that deleting the QR image cancels a transaction or revokes an exposed secret. Those outcomes depend on the relevant systems. Preserve safe evidence, such as time, recipient and transaction reference, while keeping financial and account details private.
Related questions
Is a QR code safer than a typed payment link?
Not inherently. Both can direct you to a destination that needs independent verification.
Sources and scope
Scope notes distinguish published documentation, supplied information and editorial methods. They do not report a hands-on service test.
- Canadian Centre for Cyber Security: QR code security — QR destination and phishing risks.
- Canadian Centre for Cyber Security: Shopping online safely — Transaction verification and online-shopping safety.
