How QR Code Payments Actually Work

QR payments come in two flavours, and they cost very different amounts of money. Pick the wrong one and you’ll pay card-rate fees when you didn’t have to.

That’s the distinction we want you to walk away with.

Type one: card-based QR. You display a code, on a card, a table tent, or a poster. Your customer scans it with their phone camera. A hosted checkout page loads. They enter their card details or tap Apple Pay or Google Pay.

From that point, it’s a normal card transaction running on Visa or Mastercard. The QR code is really just a URL in a box, and you pay card processing rates.

Type two: Open Banking QR, also called Pay by Bank. The code initiates a Payment Initiation Service request via a regulated PISP. Your customer’s phone opens their banking app directly.

They authenticate with Face ID, fingerprint, or PIN. The money moves via Faster Payments, straight from their account to yours. No card network. No interchange fee.

Picture a Camden cafe at 8am taking £4 lattes through SumUp QR. That’s the first rail. Picture a Soho restaurant at 10pm taking £180 dinner bills through Atoa or Wonderful. That’s the second.

The scan-a-code mechanic looks identical to your customers. The fee structure is not, and we think that’s the one fact most existing QR guides bury.

Static vs dynamic codes. A static QR code is fixed, you print once and use indefinitely. A dynamic code is generated fresh for each transaction, with the amount pre-encoded in the code itself.

Card-based providers like SumUp and Square typically use static codes. Most Open Banking providers use dynamic codes. Dynamic codes are harder to tamper with, an expired copy leads nowhere, and they let you reconcile each payment to a specific transaction.

A bookkeeper will notice the difference at month end.

Settlement differs too. Open Banking QR settles via Faster Payments, same day, often within seconds. Card-based QR settles at T+1 for most UK acquirers, sometimes T+1 to T+3 depending on your provider.

On a Friday evening your waiter is still waiting on a card terminal to reach the last table while the queue at the door builds.

The UK QR Landscape in 2026

UK customers are ready for QR. The infrastructure caught up in 2025, and consumer behaviour caught up alongside it.

Open Banking Limited confirmed the UK passed 15 million active Open Banking user connections in mid-2026, with nearly 33 million transactions in November 2025 alone. 94% of UK adults now own a smartphone and 42% use mobile contactless payments regularly.

Amazon UK launched Pay by Bank at checkout in 2026. When a retailer that size adopts a payment method, we read it as a signal that consumer readiness is no longer the barrier.

The question now is whether your specific customers will use it, not whether the country at large is ready.

Open Banking QR providers you’ll encounter in the UK:

Wonderful (wonderful.co.uk) targets hospitality, beauty, and retail. Pricing: £9.99/month, 1,000 transactions included, then 1p per transaction (as of May 2026; check current pricing).

Atoa (paywithatoa.co.uk) focuses on hospitality. Noda charges a fixed £0.20 per transaction.

Stripe has integrated Tink for UK Open Banking, so if you are already on Stripe you can present a QR that routes via Open Banking rather than a card network. GoCardless has expanded into instant payment initiations alongside its direct debit core.

NatWest Payit has agreed VRP partnerships with Tink, Token, and Yapily, positioning it as a white-label Pay by Bank product for business customers.

If you run a hospitality site and want the lowest per-transaction fee at meaningful volume, we’d put Wonderful and Atoa on your shortlist.

If you’re already on Stripe and want Open Banking without changing provider, the Tink integration is the path of least resistance.

Card-based QR providers:

SumUp QR: 2.5% pay-as-you-go, 1.99% on the £19/month plan. Your customer enters card details on a hosted page or uses Apple Pay or Google Pay. Square: 1.4% + 25p in-person. Stripe payment links auto-generate a QR at 1.5% + 20p. PayPal QR: 1.5% + £0.10 on transactions over £10.

Alipay+ and WeChat Pay, the Chinese payment rails:

Both operate on merchant-presented QR. Your customer scans your code with Alipay or WeChat Pay and authenticates in-app. Settlement flows in GBP to your account via a UK aggregator. Options include Airwallex, Globepay, and hosted checkout products from Stripe and PayPal.

Alipay+ is broader than Alipay alone. It covers partner wallets including GCash (Philippines), Kakao Pay (South Korea), and Touch ‘n Go (Malaysia). If your customers include students or visitors from across Asia rather than just China, your acceptance reaches further than you’d expect.

Fees and Economics by Rail

The fee gap between Open Banking and card-based QR is, in our view, the whole argument for switching rails. At any meaningful volume we think it’s the biggest single lever on your payment costs.

Open Banking QR. No interchange. No card scheme fee. You pay your PISP a fixed amount per transaction or a monthly subscription. Typical range: £0.20–£0.50 per transaction, or around 1p per transaction on a subscription like Wonderful’s at scale.

At a £20 average transaction, a provider charging £0.20 per payment , Noda’s fixed rate, for example, works out at a 1% effective rate. SumUp at 2.5% is two and a half times that.

Two and a half times, on every transaction you take. We don’t think that gap survives close scrutiny once you actually price it out.

Open Banking fees vary by provider. Noda charges £0.20 flat. Wonderful uses a subscription model. Finexer uses usage-based pricing. Compare at your actual volume, not against a single example rate, because the rank order changes depending on how busy you are.

Picture the restaurant owner pulling three months of fee statements on a quiet Tuesday morning, putting Wonderful and SumUp side by side on a notepad. If you’re doing 2,000 transactions at £15 average, that ten-minute exercise is worth doing before you sign anything.

Card-based QR. Standard card processing rates apply, the same as your card reader. SumUp: 2.5% pay-as-you-go, 1.99% monthly. Square: 1.4% + 25p in-person. Stripe: 1.5% + 20p. PayPal: 1.5% + £0.10.

One caveat worth checking. If your customer types card details rather than tapping Apple Pay, that’s card-not-present (CNP), and some providers apply their higher online rate. Confirm with your provider before you assume the in-person figure applies to QR.

Settlement. Open Banking via Faster Payments: same-day or instant. Card-based QR: T+1 (next working day) for Square and Stripe; T+1 to T+3 for SumUp depending on your plan and account history.

Refund mechanics, the part most QR guides skip. Open Banking QR has no chargeback process. If your customer pays via Pay by Bank and later wants a refund, they have fewer institutional levers than they would with a card payment.

You initiate any refund manually. No card-network dispute route exists.

For purchases where a customer might rely on card dispute rights, high-value items, services that could be disputed as not-delivered , card QR preserves those rights. Open Banking QR doesn’t. If you sell anything where a refund argument is likely, keep card on the menu for that segment.

The upside for you is real. Open Banking’s fraud rate is 0.013% versus 0.045% for the industry average. Lower fraud cost and fewer chargebacks, in exchange for weaker consumer protection.

That’s the real trade-off, and it’s worth understanding before you nudge a customer onto one rail or the other.

When does the maths tip in favour of Open Banking QR? At a £10 average transaction, ~20p per payment is a 2% effective rate, comparable to card. At £30 average it’s ~0.7%. At £50, ~0.4%.

The saving grows with your average transaction value. For a coffee shop doing £3 transactions the difference is small. For a restaurant at £25+ per head it stacks up fast.

Run the numbers on your own transaction mix before you switch, and on the last three months, not on the busiest week of the year.

Use Cases That Work (and Some That Don’t)

Hospitality table-pay. If you run a restaurant or bar, this is the use case worth taking seriously on its own merits, separate from any fee argument.

Diners scan a code on the table, split the bill, and pay from their banking app. Floor staff stop carrying terminals to each table at the end of service. That’s the entire pitch.

SumUp claims up to 15 minutes saved per table at busy services. Even if we discount that figure by half, the end-of-meal payment bottleneck is the single most preventable friction point in a busy Friday service, and removing it is worth more than the fee saving.

A Soho restaurant using Atoa or Wonderful for table-pay also avoids the card network fee on table bills. That is a real advantage on hospitality margins that are already thin. The caveat: some customers will still want a card terminal. Keep one available.

We think table-pay is the strongest standalone case for QR in UK hospitality, operations first, fee saving second.

Market traders and pop-up sellers. Picture a Bristol farmers’ market trader on a wet Saturday morning, queue forming before the rain comes back, SumUp QR on a laminated card in the cash drawer.

No hardware to carry, no battery dying mid-rush, no card reader to misplace between markets.

The 2.5% fee is higher than a card reader’s 1.75%, but the zero capital outlay and zero hardware risk are genuine advantages if you only trade occasionally. If you’re on a regular pitch four days a week, a card reader pays for itself quickly at that volume.

Donations and community fundraising. Printed QR codes on collection stands, leaflets, or event posters work well for charities and community groups.

Open Banking QR at 1–2p per transaction is much cheaper than card processing, meaningful on donation volumes. GoCardless and Wonderful are common choices. Your donations land directly in your bank account, with no cash to count and no floats to reconcile at the end of the event.

Tourist-facing retail. An Oxford Street retailer or a heritage gift shop near a major UK attraction can accept Alipay+ via merchant-presented QR. Your customer scans with their Alipay or WeChat Pay app and authenticates in-app. The payment settles in GBP to your account.

If your shop sits near a major UK university with a sizeable Asian student population, Alipay+ coverage extends to Korean, Filipino, and Malaysian wallets too. Worth checking your actual catchment before you assume Alipay+ is only a Central London concern.

Sole traders and tradespeople. A London photographer finishes a shoot, generates a Stripe payment link on their phone, and shows the QR to the client before leaving the shoot. Payment collected on the spot. No invoice to chase. No card reader to carry.

If you’re already on Stripe or Square, try this before buying a card reader. You can create and share a QR-linked checkout in under a minute.

Where QR doesn’t work as your primary payment method:

If your customer base skews older, QR as your only checkout option will cost you sales. A traditional tearoom or a suburban pharmacist needs card terminals as the default. QR supplements card. It does not replace it.

For high-value purchases, your customers may prefer card partly for Section 75 Consumer Credit Act coverage. A £1,200 laptop or a £2,500 piece of furniture carries meaningful credit card protection that Open Banking QR can’t replicate.

In low-signal environments, festival sites, building basements, rural outdoor markets, card readers with offline mode keep an edge. A QR checkout needs mobile data or Wi-Fi at the authentication step. A card reader with offline mode doesn’t.

Our rule for QR is simple: add it where it pays for itself, don’t force it where it doesn’t.

The Risks: Quishing, Trust, and Friction

The quishing problem is bigger than most payment guides suggest. In our view it’s the most underweighted risk when businesses evaluate QR acceptance.

The numbers we pulled aren’t subtle. Action Fraud recorded a 587% rise in QR-code phishing reports between 2023 and 2025. Microsoft threat data shows quishing surged 146% in Q1 2026. Europol’s 2026 assessment flags it as the fastest-rising payment-initiation attack across the EU.

And the mechanics are crude, which is exactly why they work.

A fraudster prints a QR sticker and places it over yours, on a parking meter, a restaurant table tent, an EV charging station. Your customer scans it, lands on a fraudulent checkout that looks identical to the real one, and enters their card details or banking credentials.

For you as a merchant, this matters in two ways. First, your displayed QR code can be physically replaced without your knowledge, and your customers lose money while associating that loss with you.

Second, consumer wariness around QR scanning is now real. Several UK councils issued warnings in early 2026, and we’ve seen hospitality operators report customer hesitation at table QR codes simply because of the general noise around quishing scams.

What you can do. Picture a restaurant manager opening up on Monday morning, glancing at the table QR card and noticing the edges do not quite line up. A fraudster placed a sticker overnight.

That morning check is the entire protection model for static QR.

Inspect codes regularly. Look for stickers over stickers, misaligned edges, or different paper quality. Build it into your opening routine so it actually happens.

If you use dynamic QR codes, regenerated per transaction, an old copy leads nowhere, so the attack is blunted. We’d choose dynamic over static wherever your provider supports it.

For Open Banking QR, the payment authenticates inside your customer’s banking app, a much harder environment to spoof than a card entry page.

The fraud rate on Open Banking transactions is 0.013%, versus 0.045% industry average. A real advantage, but it does not remove the physical display risk.

Consumer trust and the smartphone requirement. QR payments need a smartphone, mobile data or Wi-Fi, and a willing customer. For regulars who already tap their phone to pay, that is trivial.

For first-time customers, or anyone rushing for a train, the redirect-to-banking-app journey adds friction.

Roughly 6% of UK adults don’t own a smartphone, and that share concentrates in older demographics. If you serve a mixed age group, don’t pull the card terminal when you add QR.

Should Your Business Add QR Acceptance? A Decision Framework

The case for QR isn’t the same for every business. Work through these four questions before you commit.

By month-end your manager is reconciling three months of statements before deciding whether to switch rails.

Start with the rail, not the format. Card-based QR is just a card payment without a card reader. If you already accept cards, switching to card-based QR doesn’t reduce your fees.

Open Banking QR is the one that changes the economics. The question worth asking is whether Open Banking QR specifically makes sense for your situation, not whether QR as a format does. Those are different questions, and most guides blur them.

Run the fee comparison at your actual average transaction value. At £10 average, Open Banking at ~20p is roughly 2% effective, no better than standard card. At £25 it is ~0.8%. At £50, ~0.4%.

The saving grows with average value.

If you haven’t run these numbers at your actual transaction mix, you’re guessing. Pull three months of statement data before you make any decision about changing payment provider, and do it now, not in the middle of a summer trading rush when nobody has the headspace.

Consider whether your customers will use it. If most of your customers already tap their phone to pay, adding Open Banking QR is low-friction.

If a large proportion insert a card and type a PIN, the “scan this code, then open your banking app, then authenticate” journey will feel like extra work for them.

If you’re in hospitality, evaluate table-pay separately. The operational argument, customers split bills themselves, staff aren’t running terminals to tables at the end of service, stands on its own, separate from the fee question.

In our view, this is the strongest standalone case for QR in UK businesses today.

If you have Chinese tourist or Asian diaspora traffic, Alipay+ has a clear ROI. The setup cost via Airwallex or Globepay is low. The sales you’re currently turning away aren’t.

If you’re near a major UK tourist site, a university with significant Asian student numbers, or Central London, this is a conversation worth starting with your payment provider this week, not next quarter.

What we’d avoid. Switching to QR-only without checking your customer demographics first. Assuming card-based QR saves you money when it doesn’t. And deploying static codes without a physical inspection routine.

Frequently Asked Questions

How We Researched This Guide