Originally Posted by hillrider

That is astoundingly bad security for a payment link.

Make sure you go to https://qatarairways.com/cardpayment instead.

The unencrypted link they gave is open to interception and redirected to a card-stealing site instead of being redirected by QR to its own secure site. QR should know better.