MOST of the time, when you are asked to use a QR code, there are other options. Either a phone number, maybe a website, or in my case when I scanned a QR code only to have my credit card immediately stolen, I could have just walked up to the bar to order food.
I was lucky. My bank called me right away having flagged a $1 charge to a store in Florida. And, by the way, use caution with texts from your bank. Even phone calls. If you think you your bank is trying to reach you, call the number yourself on the back of your card.