QR code menus became commonplace fast, and most diners now scan one without a second thought. That convenience is exactly what makes table-tent codes an attractive target — see our documented restaurant menu scam case file for how this plays out in practice.
For diners: what to actually check
- Does the destination match the restaurant's actual name? A menu or ordering page hosted on a domain unrelated to the restaurant is a clear warning sign.
- Does the payment page match the restaurant's branding? A generic or mismatched design asking for full card details when a simple tap-to-pay would suffice is worth pausing over.
- Is the code physically consistent with the rest of the table material? A different paper stock, print quality, or slight misalignment can indicate a sticker placed over the original.
If anything feels off, running the code through CheckThisQR takes seconds and costs nothing.
For restaurant owners
Table-tent and menu codes are specifically called out in our business QR safety guide as a high-exposure category — they're easy to reach, often unattended for hours, and directly touch payment flows. The single highest-leverage fix: laminate or embed the code into the printed material itself rather than using a separate adhesive sticker, making it meaningfully harder to convincingly overlay.
Red flags worth teaching your staff
- A customer mentions the menu link "looks weird" or asks to pay differently — treat this as a signal worth checking that table's code immediately, not just an isolated complaint.
- A code that looks slightly raised, bubbled, or has visible adhesive residue at the edges.
- Any table-tent or sign that seems to have been recently touched or repositioned outside normal cleaning routines.