QR Code Payments: How They Work and What They Cost
QR code payments (scan-to-pay) move money from the customer's wallet or banking app to a code you display, with no POS hardware: the customer scans, authorises with 3D Secure and funds typically arrive in 1-2 working days. This guide covers how it works, static versus dynamic security and real fees, with IC++ pricing at €0.15 + 0.35% to 0.85%.
QR code payments: flat rate versus IC++ pricing (estimated monthly cost)
| Offer | €2,000/month | €5,000/month | €20,000/month |
|---|---|---|---|
| SumUp online channel (2.5%) | €50 | €125 | €500 |
| RoxPay IC++ (€0.15 + 0.35%-0.85%) | €13-€23 | €32.50-€57.50 | €130-€230 |
Illustration based on a €50 average ticket; the RoxPay range depends on the card mix. Online rates per SumUp's public price list.
How a QR code payment works
A QR code is an image that encodes information readable by the customer's app. In payments it can hold the merchant's IBAN, a link to a checkout page or a transaction identifier. The flow is always the same: the customer scans the code, the wallet or banking app opens the payment screen, the amount is confirmed and the network authorises the transaction.
There are two families of codes. A static QR is always the same: it encodes a fixed recipient and is printed once, a sticker at the counter. A dynamic QR is generated per transaction and includes the amount and a unique identifier. The EMVCo standard, created by Visa, Mastercard and the main networks, governs interoperability between wallets. For the wider picture, the [guide to payment methods](/en/resources/metodi-di-pagamento) puts QR codes side by side with cards, wallets and transfers.
Static or dynamic QR: security and fraud
The key difference is modifiability. A static QR stays identical over time: anyone with physical access to the window or the menu can replace the sticker and redirect customers to a fraudulent account, as UK and European bank antifraud guidance warns. A dynamic QR removes the problem at the root: it is issued per transaction, embeds the amount and expires after use.
On the regulatory side, the PSD2 directive applies strong customer authentication (3D Secure) to QR payments as to any remote payment. Three practical checks before confirming: the amount matches, the merchant name is visible on the app, and the code was issued by the merchant rather than reprinted. Use a static QR only with full awareness that it can be swapped in person.
When the QR beats a POS and when it does not
Paying by QR code takes the physical POS out of the equation: no terminal, no battery, one printed code or a screen. Typical contexts are B2B invoices with an encoded IBAN, table menus, events and museums, utility and tax notices, and occasional sales where buying a POS is not justified.
The limits are clear: the QR asks the customer to open an app and scan, while contactless on a terminal is a single gesture. For a shop with daily queues the POS stays faster, and lines do not tolerate extra steps. The QR excels on remote amounts and documents instead: the guides on [virtual POS](/en/resources/virtual-pos) and [payment links](/en/resources/payment-link-generator) describe the twin flows for remote payments.
Costs: how the QR channel is priced
The economic issue is the channel. Many providers price the QR as an online payment, with higher percentages than in-person acceptance: SumUp's public price list charges 2.5% for online payments against 1.95% in person. On 10,000 euros of monthly QR volume, that difference is worth more than 500 euros a year.
With IC++ pricing every component is separated and verifiable: RoxPay applies €0.15 + 0.35% to 0.85% (IC++), with interchange and scheme fees shown at real cost on the statement. The RoxPay QR is generated as a dynamic payment link per transaction: the [payment link guide](/en/resources/payment-link-generator) walks through the full flow.
How to start accepting QR code payments
Activation takes three steps: an account with an enabled payment provider, the choice of code type (dynamic for security), and placing the QR where the customer sees it: display, receipt or invoice. Dynamic codes are generated from the dashboard or via API for each collection.
To decide whether the QR works alone or alongside other channels, two numbers matter: the share of customers with enabled wallets or banking apps, and the average amount. Where contactless on a terminal dominates, the QR remains the support channel for invoices and digital-first buyers; where no POS exists, it is the gateway to digital payments. The [virtual POS guide](/en/resources/virtual-pos) and the [phone POS guide](/en/resources/phone-pos) complete the hardware-free picture.
Frequently Asked Questions
How does a QR code payment work?
The customer scans with a camera or banking app a QR code that encodes the merchant's details and, for dynamic codes, the amount. The app opens the payment page, the customer authorises with 3D Secure or biometrics and the network processes the transaction, typically settling in 1-2 working days.
Are QR code payments secure?
The dynamic QR is the secure format: generated per transaction, it embeds the verified amount and merchant and expires after use. A static QR stays valid forever and can be swapped by a fraudulent sticker: checking amount and merchant name before confirming is the antifraud rule recommended by banks.
How much do QR code payments cost?
It depends on the provider and the channel: many providers apply the online-channel rate to the QR, higher than in-person (SumUp's public list shows 2.5% online against 1.95% in person). With RoxPay IC++ pricing you pay €0.15 + 0.35% to 0.85% (IC++), with every component at real cost.
What is the difference between a QR code and a payment link?
The difference is exposure: a payment link is sent by SMS, email or chat to a remote customer, while a QR code is scanned in person from a sticker or a screen. Under the hood it is the same flow: secure page, 3D Secure authorisation, remote settlement.
You might also like
High Risk Payment Gateway
Secure payment processing for high-risk industries with multi-acquirer routing and chargeback protection.
Small Business Payment Solutions
Transparent IC++ pricing, free Smart POS terminal, and 24-hour activation for small businesses.
E-commerce Payment Integrations
One-click plugins for WooCommerce, Magento, and PrestaShop with full API access.
Optimize your payments today
Still unsure which payment gateway to choose? The RoxPay team helps you find the right solution. Contact us at /en/contact.
✓ No monthly fixed costs · ✓ Activation in 24 hours · ✓ Dedicated technical support
