The broken card-machine and the swapped QR
At a delivery or in a shop, the card machine's screen is "broken" or you can't see the amount — or the person offers to handle the card for you. You type your PIN blind, and a higher amount is charged, or your card is swapped for another. A similar trick uses a printed PIX QR code at the till that has been swapped for one that pays a stranger.
What to do: if you can't clearly read the amount on the screen, don't type your PIN. Keep your card in your own hand. When you pay by PIX QR, check the recipient name your app shows before you confirm — and always confirm the value first.
Threat examples
Sorry, the machine's screen is cracked so you can't see the total, but it's the right amount — just go ahead and type your PIN here.