Bring back menus, QR codes are terrible

The worst aspect of QR codes as menu replacements is that they are a huge security risk. Who’s to say that QR code is legit? You can’t tell from looking at it. The trouble is compounded by the common practice of restaurants using some third-party service hosted off-site. The domain is no longer a trust signal either. It’s only a matter of time before someone starts snarfing information or credit card numbers this way (scan here to pay your bill).

Most of the places I've been to just put their menu on a website linked through QR code, but still take orders and payment through staff. I've been to one place that doesn't do this but only one.

> restaurants using some third-party service hosted off-site.

agreed. it's become frustrating. I shouldn't have to make an account with some 3rd party to view specials. Also shouldn't have to look at 2002 style desktop publishing to try to find a menu either.

some have been well done. but not nearly enough.

It’s usually just a menu, not e-shoping at the table. Why would they even implement that, if a waiter has to greet you, bring orders and clean up anyway?

ordering and paying through the QR code is now pretty common place in NYC. fewer waiters can attend more tables.

But if a malicious QR code led to a website that asked diners to pay for their meal at the point that they ordered it, how many of them would?

Setting up a scam payment processing account for that doesn't seem worth the effort when it's going to be reported for fraud basically immediately.

How does tipping works in those places?

You'd be surprised.

I'm pretty sure that the only compromised credit card I've had in the past decade was due to something along these lines.

I called a restaurant to get some takeout on Valentine's Day (one that I'd been to for dine-in previously, and had great food), and they told me that they didn't do phone orders, only online orders. I placed my food order, and was immediately also hit with a pending charge of <$1 for a utility provider in a difference province where I've never lived. (I get email notifications of credit card transactions.) Called bank and they cancelled card, so it didn't progress any further.

I'm not inclined to eat at that restaurant again, or to ever order food online again.

It certainly crossed my mind to print up some QR Code stickers that connect you to a wifi network named %p%s%s%s%s%n when you scan them, to slap over random ones around...

http://api.qrserver.com/v1/create-qr-code/?color=000000&bgco...

"To pay for your 1 x Cheeseburger add egg, please purchase a $10 iTunes gift card and enter the code here: [_______________]"

Its usually payment whilst ordering via the site/menu. (Uk) Server just brings food/drinks and doesnt deal with money.

I wish they would just take orders from the site, but pay with a card machine which 107% of people are used to.

The same way other ordering services does it you can either do it through the app or you can always leave cash on the table as always.

Malicious Scan Here to Pay on the fuel dispenser/charger, etc

I would leave if they won't take payment in person. No way am I signing up for some shitty online service to pay for an in-person meal.

I personally much prefer scanning a code on my receipt then pressing the apple pay button to handing my debit card with all my payment details on it to a stranger.

I think you could set up something clever where the QR code redirected to the correct menu 95% of the time, and maybe it didn't charge the credit card initially, and that would last longer than if you had charged something immediately 100% of the time. However, I think your point still stands that it's not worth the trouble and it doesn't scale well.