Guide · By DueTrack Studio · Updated 2026-10-29
QR code scams: how to spot a fake QR code before you scan
QR code scams hide a harmful link behind a code — stuck over a real one on a parking meter, printed in an email or text, or on a fake delivery notice. Before opening a scanned link, look at the full web address: misspelled brand names, odd domains and pages asking you to log in or pay are warning signs. The FTC advises not scanning codes from unexpected messages.
Where do fake QR codes appear?
- Stickers placed over real codes on parking meters and EV chargers.
- Emails and texts claiming a delivery, refund or account problem.
- Flyers and posters in public places.
- Fake invoices and letters.
What are the warning signs?
- A sticker that looks stuck on top of another code.
- Urgency: 'pay now', 'account suspended'.
- A web address that misspells a brand or uses a strange domain.
- A shortened link that hides the destination.
- A page asking for passwords, card numbers or app downloads.
How do you check a QR link safely?
- Preview the full address before opening it.
- Reveal where shortened links really go.
- Type the official website yourself instead of using the code.
- Never enter passwords or payment details on a page you reached by an unexpected code.
Questions
Is it safe to scan the QR code on a parking meter?
Check first. Look for a sticker placed over the original, and preview the link — or pay through the official app or website you type yourself.
I scanned a QR code and entered my card details. What now?
Contact your card provider immediately, change any password you entered, and report the scam. In the U.S. you can report to the FTC.