مدفوعات رمز QR: كيف يعمل الدفع بالمسح
QR code payment systems worldwide — merchant-presented vs consumer-presented, EMVCo QR standard, and implementations from Alipay to Pix.
QR Code Payments: How Scan-to-Pay Works
QR code payments have become the dominant payment method in many countries, particularly in Asia. Over 2.2 billion people use QR code payments, processing trillions of dollars annually. Understanding the mechanics helps businesses integrate this payment method.
Two Operating Modes
Merchant-Presented (MPM)
The merchant displays a QR code; the customer scans it:
- Merchant generates a QR code (static or dynamic)
- Customer opens their payment app and scans the QR code
- Customer confirms the payment amount
- Payment is processed through the payment network
- Both parties receive confirmation
Best for: Small merchants, market stalls, fixed payment points.
Consumer-Presented (CPM)
The customer displays a QR code; the merchant scans it:
- Customer opens their payment app, which generates a QR code
- Merchant scans the customer's QR code with a POS scanner
- Merchant enters the payment amount
- Payment is processed
- Both parties receive confirmation
Best for: Retail checkout, restaurants, transit gates.
EMVCo QR Code Standard
EMVCo (the organization behind chip cards) has standardized QR code payment formats:
- Payload Format Indicator: Identifies the QR as an EMVCo payment code
- Merchant Account Information: Payment network and account details
- Transaction Amount: Pre-filled or entered at scan time
- Country Code: ISO 3166 country
- Merchant Name: Display name for customer confirmation
- CRC: Error detection checksum
Major QR Payment Systems
| System | Region | Users | Mode |
|---|---|---|---|
| Alipay | China | 1.3B+ | Both MPM and CPM |
| WeChat Pay | China | 900M+ | Both |
| Pix | Brazil | 140M+ | Both |
| UPI (Google Pay, PhonePe) | India | 300M+ | Both |
| PayPay | Japan | 60M+ | Both |
| GrabPay | SE Asia | 30M+ | Both |
| Venmo | US | 85M+ | CPM |
Static vs Dynamic QR Codes
Static: A printed QR code with fixed merchant information. Customer enters the amount. Low cost (just a printed sign), but no automatic amount filling.
Dynamic: A new QR code generated per transaction with the exact amount embedded. Requires a screen or per-transaction printing. More secure and convenient.
Security Measures
| Threat | Protection |
|---|---|
| QR code tampering | Merchants verify their QR code is not overlaid with a fake |
| Transaction replay | One-time-use dynamic codes expire after use |
| Man-in-the-middle | End-to-end encryption between customer app and payment network |
| Phishing QR | Payment apps verify merchant identity before processing |
Implementation for Merchants
- Register with a QR payment provider (bank or fintech)
- For static MPM: Print the QR code sign for your counter
- For dynamic MPM: Set up a display (tablet or screen) that generates per-transaction codes
- For CPM: Configure your POS scanner to read customer payment QR codes
- Train staff on the payment confirmation workflow
- Reconcile QR payments in your accounting system