[Tangsen]

QR code can't do any harm lah. It only does harm to others because it points you to a website that asks you to install an app. If you only use paynow or paylah to scan a QR code I dun see how a phone can be hacked.

It can be program auto install without you knowing.

[Tangsen]

Bo ya lah. QR code cant do anything to yr phone lah. You need ensure the site is correct when QR scan forward u to.

The scam is because scammer overlay a fake QR over the real QR. U are led to a fake site...

You notice many QR code stickers are outside of their stall. At night some one will come and stick a scam QR code over the real one. You think the hawker will know or will check daily.

The scam QR code can forward you link where you need to click to a fake "proceed to pay" and it install the malware at the same time re-route you to the real payment gateway.
How many of you will be diligent or conscious enough to realize? 

As a security/risk expert always mentioned, you can be diligent 100 but scammers need only 1 opportunity.