Generate a QR Code for Payments

QR Codes for Payments

Payment QR codes encode financial transaction data that allows users to send money by scanning. Different payment systems use different URI schemes and formats.

PayPal

PayPal uses a simple URL format:

https://paypal.me/username/25.00

This opens the PayPal app or website with the recipient and amount pre-filled. The payer must confirm the transaction.

Venmo

Venmo uses a similar URL-based approach:

https://venmo.com/username?txn=pay&amount=25.00&note=Lunch

Cryptocurrency

Bitcoin and other cryptocurrencies use their own URI schemes:

bitcoin:1A1zP1eP5QGefi2DMPTfTL5SLmv7DivfNa?amount=0.001

Ethereum:

ethereum:0x89205A3A3b2A69De6Dbf7f01ED13B2108B2c43e7?value=1e18

EPC QR Code (SEPA Transfers)

The European Payments Council defines a standardized QR format for SEPA credit transfers:

BCD
002
1
SCT
BFSWDE33BER
Red Cross
DE89370400440532013000
EUR100.00


Donation

This format is widely used in European invoices and donation forms.

Security Considerations

Payment QR codes carry significant security implications:

• Never auto-execute payments — All payment QR codes should only pre-fill transaction details. The user must explicitly confirm.
• Verify the recipient — Display the recipient name prominently before the user confirms payment.
• Use HTTPS links — All payment URLs should use HTTPS to prevent man-in-the-middle attacks.
• Beware of QR code tampering — In public spaces, malicious actors may place stickers with their own QR codes over legitimate ones. Always verify the payment destination.
• Amount validation — If the QR code includes an amount, the payment app should clearly display it for user confirmation.

Static vs Dynamic Payment QR Codes

• Static — Fixed amount and recipient. Used for donations, fixed-price items.
• Dynamic — Generated per transaction with unique reference numbers. Used for invoices, point-of-sale systems, and e-commerce.