Tools · Spotting scams

QR code scams

A QR code is just a link you can't read. Scammers stick fake ones on parking meters and send them in texts and emails. Before you open one, read the web address your camera shows, and pay parking through the city's real app or the meter itself.

Easy2 minFreeChecked October 3, 2026

You'll need

Your phone's camera
The real app or website for whatever you're paying, found yourself

What to know

Know where the fake ones show up. There are reports of scammers covering QR codes on parking meters with their own, and of QR codes sent by text or email with a made-up reason to scan. Source: FTC¹
Look before you open. Most phone cameras show the web address before you tap it. If you see a QR code in an unexpected place, inspect the address first. Source: FTC¹
Check the spelling. If it looks like an address you know, make sure it isn't faked with a misspelling or one switched letter. Source: FTC¹
Skip codes you weren't expecting. Don't scan a QR code in an email or text you weren't expecting, especially one that says to act now. Source: FTC¹
Pay parking another way when you can. Use the coin or card slot on the meter, or type the city's parking app name into your app store yourself. On a meter, look at the sticker: a code stuck on top of another sticker is a reason to walk away.
Keep your phone updated. Updating your phone's software helps protect it, and strong passwords with two-step sign-in protect your accounts. Source: FTC¹

Watch out A fake code can take you to a look-alike site that asks for your card, or install malware that steals your information. Source: FTC¹ If a page asks you to log in or pay right after a scan, stop and go to the real site yourself. Real companies won't text or email you a link to update your payment information. Source: FTC²

Scan or skip?

Where the code is	What to do
Restaurant menu at your table	Usually fine. Still glance at the address.
Parking meter or pay station	Check for a sticker on top. Pay at the meter or in the city's app.
Text or email you didn't expect	Skip it. Go to the company's site yourself.
Package notice, "missed delivery" card	Type the shipper's site yourself and use your tracking number.

Based on FTC advice. Source: FTC¹

See it done

Video by CBS Mornings National TV news

FTC Warns Scammers Are Using QR Codes

Watch on YouTube: Federal Trade Commission warns scammers are using QR codes to steal personal information

Full title on YouTube: “Federal Trade Commission warns scammers are using QR codes to steal personal information”2023 · Checked October 3, 2026

A short national news story from 2023 on the FTC’s QR code warning. Parking meters are the big example, and the advice is the same for any code.

Video won't load at school or work? No problem. Everything you need is in the steps; the video's just a bonus. Watch it on YouTube later.

If it doesn't work

Typed your card number into a page from a QR code? Call the number on the back of your card, block it and dispute the charge. See What to do if you got scammed.
Entered a password? Change it, and turn on two-step sign-in. See Turning on two-step sign-in.
Report it at ReportFraud.ftc.gov. Source: FTC³ If it was on a parking meter, tell the city's parking office too, so they can pull the sticker.

Good to know

The details, if you want them. Tap a line to open it.

Why scammers like QR codes

They want you to scan the code and open the link without thinking about it. Source: FTC¹ You can't read a QR code, so the address is the only clue you get.

Take it with you

Printable card Download card (PDF)

Sources

Federal Trade Commission Scammers hide harmful links in QR codes to steal your information
Federal Trade Commission How to recognize and avoid phishing scams
Federal Trade Commission ReportFraud.ftc.gov

Lesson T4.3 · Last checked October 3, 2026 against the sources listed.

Report a mistake

Next in ToolsPayment app scams (Zelle, Venmo, Cash App)

Once a week, if you want it

One new lesson or checklist a week. Totally optional. The lessons never need a sign-up.