Static QR Code Indonesian Standard Protection using  Visual Cryptography

Aprianti Nanda Sari; Siti Dwi Setiarini; Eddy Bambang Soewono; Muhammad Reivan Naufal Mufid; Yazid Fauzan Prasatria

doi:10.15575/join.v11i2.1796

Authors

Aprianti Nanda Sari Computer Engineering and Informatics Department, Bandung State Polytechnic, Indonesia
Siti Dwi Setiarini Computer Engineering and Informatics Department, Bandung State Polytechnic, Indonesia
Eddy Bambang Soewono Computer Engineering and Informatics Department, Bandung State Polytechnic, Indonesia
Muhammad Reivan Naufal Mufid Computer Engineering and Informatics Department, Bandung State Polytechnic, Indonesia
Yazid Fauzan Prasatria Computer Engineering and Informatics Department, Bandung State Polytechnic, Indonesia

DOI:

https://doi.org/10.15575/join.v11i2.1796

Keywords:

digital payment , QRIS, QR Code, quishing, visual cryptography

Abstract

The QR Code Indonesian Standard (QRIS) is widely used in digital payments across Indonesia, offering convenience but also introducing security risks such as quishing, QR code phishing, also known as quishing, attacks that redirect payments to fraudulent accounts. This study proposes a visual cryptography-based method to enhance the security of static QRIS. The proposed method employs a (2,2)-threshold visual cryptography scheme to split a static QRIS into two shares, held separately by the merchant and the customer, such that the original QR code can only be reconstructed when both shares are combined. A mobile-based prototype was implemented, incorporating fiducial marker detection, tilt correction, and image binarization to support accurate share reconstruction under real-world conditions. Experimental evaluation was conducted through 15 reconstruction trials using various smartphones and display conditions. The results show a reconstruction success rate of 80% (12 out of 15 trials), while 20% of attempts failed due to low camera resolution and complex background patterns that interfered with marker detection and binary conversion. Compared to existing QRIS security approaches that rely on dynamic QR codes or location-based verification, the proposed method offers a novel share-based protection mechanism specifically tailored to static QRIS. These findings indicate that visual cryptography can effectively mitigate quishing attacks on static QRIS, although its practical deployment remains dependent on environmental and device-related constraints.

References

1] I. Benito-Altamirano, D. Martínez-Carpena, H. Lizarzaburu-Aguilar, C. Fàbrega, and J. D. Prades, “Reading QR Codes on challenging surfaces using thin-plate splines,” Pattern Recognit Lett, vol. 184, pp. 37–43, Aug. 2024, doi: 10.1016/j.patrec.2024.06.004.

[2] A. Kumari and K. K. Gaikwad, “Data carriers for real-time tracking and monitoring in smart, intelligent packaging applications: A technological review,” Next Materials, vol. 8, p. 100591, Jul. 2025, doi: 10.1016/j.nxmate.2025.100591.

[3] A. N. Sari and T. G. Abdillah, “Metode Absensi Mahasiswa berbasis QR Code dan Time-Based One-Time Password,” Jurnal Informatika Polinema, vol. 7, no. 2, pp. 29–34, 2021, doi: 10.33795/jip.v7i2.492.

[4] I. Das, D. Das, and C. QR, “QR Code and its effectiveness in Library services,” Library Philosophy and Practice (e-journal). Accessed on, vol. 9, no. 10, p. 2022, 2021.

[5] K. Natsir, N. Bangun, M. B. Attan, and J. S. Landias, “PENGGUNAAN QRIS SEBAGAI ALAT PEMBAYARAN DIGITAL UNTUK MENINGKATKAN PRODUKTIVITAS UMKM,” Jurnal Serina Abdimas, vol. 1, no. 3, pp. 1154–1163, Aug. 2023, doi: 10.24912/jsa.v1i3.26208.

[6] D. Prawitasari, F. D. Badiani, S. D. Rachmawati, F. P. Ningrum, and N. L. Mufidah, “QRIS in indonesia: a comprehensive literature review on adoption, challenges, and opportunities,” Revenue: Jurnal Manajemen Bisnis Islam, vol. 5, no. 1, pp. 91–102, 2024.

[7] D. I. Saibil, F. Sodik, and A. A. Mardiah, “FAKTOR MEMPENGARUHI NIAT MENGGUNAKAN QRIS PADA SHARIA MOBILE BANKING SAAT PANDEMI COVID-19 (MODIFIKASI MODEL UTAUT 2),” NISBAH: Jurnal Perbanka Syariah, vol. 8, no. 2, pp. 75–92, Dec. 2022, doi: 10.30997/jn.v8i2.6353.

[8] G. A. Amoah and J. B. Hayfron-Acquah, “QR Code security: mitigating the issue of quishing (QR Code Phishing),” Int J Comput Appl, vol. 184, no. 33, pp. 34–39, 2022.

[9] L. J. L. Bekavac, S. Mayer, and J. Strecker, “QR-code integrity by design,” in Extended Abstracts of the CHI Conference on Human Factors in Computing Systems, 2024, pp. 1–9.

[10] G. Awuah Amoah, “QR Code Security: Mitigating the Issue of Quishing (QR Code Phishing),” 2022.

[11] F. Sharevski, A. Devine, E. Pieroni, and P. Jachim, “Phishing with Malicious QR Codes,” in Proceedings of the 2022 European Symposium on Usable Security, New York, NY, USA: ACM, Sep. 2022, pp. 160–171. doi: 10.1145/3549015.3554172.

[12] G. A. Amoah and J. B. Hayfron-Acquah, “QR Code security: mitigating the issue of quishing (QR Code Phishing),” Int J Comput Appl, vol. 184, no. 33, pp. 34–39, 2022.

[13] InterActive QRIS, “QRIS Statis & Dinamis.” Accessed: Jul. 16, 2025. [Online]. Available: https://qris.interactive.co.id/homepage/qris-why-choose-us-qris-statis-dan-dinamis.php?lang=id

[14] A. A. Ajhari, “Analisis Keamanan Sistem Pembayaran Digital Quick Response Code Indonesian Standard (QRIS).”

[15] C. Bhardwaj, H. Garg, and S. Shekhar, “An approach for securing QR code using cryptography and visual cryptography,” in 2022 International Conference on Computational Intelligence and Sustainable Engineering Solutions (CISES), IEEE, 2022, pp. 284–288.

[16] S. Mittal, P. Kaur, and K. R. Ramkumar, “Achieving Privacy and Security Using QR-Code through Homomorphic Encryption and Steganography,” in 2021 9th International Conference on Reliability, Infocom Technologies and Optimization (Trends and Future Directions) (ICRITO), IEEE, Sep. 2021, pp. 1–6. doi: 10.1109/ICRITO51393.2021.9596265.

[17] A. van Putten, M. F. Giersberg, and T. B. Rodenburg, “Tracking laying hens with ArUco marker backpacks,” Smart Agricultural Technology, vol. 10, p. 100703, Mar. 2025, doi: 10.1016/j.atech.2024.100703.

[18] M. Kalaitzakis, B. Cain, S. Carroll, A. Ambrosi, C. Whitehead, and N. Vitzilaios, “Fiducial markers for pose estimation: Overview, applications and experimental comparison of the artag, apriltag, aruco and stag markers,” J Intell Robot Syst, vol. 101, no. 4, p. 71, 2021.

[19] T. Yuan, Y. Song, G. A. Kraan, and R. H. M. Goossens, “Identify finger rotation angles with ArUco markers and action cameras,” J Comput Inf Sci Eng, vol. 22, no. 3, p. 031011, 2022.

[20] R. Berral-Soler, R. Muñoz-Salinas, R. Medina-Carnicer, and M. J. Marín-Jiménez, “DeepArUco++: Improved detection of square fiducial markers in challenging lighting conditions,” Image Vis Comput, vol. 152, p. 105313, Dec. 2024, doi: 10.1016/j.imavis.2024.105313.

[21] T.-Y. Yang et al., “Positioning of autonomous mobile robot using multi-lateration with pattern recognition and differential evolution,” Rob Auton Syst, vol. 193, p. 105113, Nov. 2025, doi: 10.1016/j.robot.2025.105113.