Is the QR Code Scam real or a scam?

This is a confirmed scam. Do not click any links, do not provide personal information, and do not send money. This is a phishing scam.

What should I do if I received the QR Code Scam?

Do not respond or click any links. Block the sender, report the message as spam, and delete it. If it came via text message, forward it to 7726 (SPAM).

What if I already fell for the QR Code Scam?

Change your passwords immediately, contact your bank if you shared financial information, place a fraud alert on your credit, and file a report with the FTC at ReportFraud.ftc.gov.

How do I report the QR Code Scam?

Report it to the FTC at ReportFraud.ftc.gov, the FBI's Internet Crime Complaint Center (IC3) at ic3.gov, and your local law enforcement. If it impersonated a specific company, report it to that company as well.

QR Code Scam: Is It a Scam?

High Prevalence Type: Phishing

Yes, this is a scam. Do not click any links or provide personal information.

Scammers place fraudulent QR codes on parking meters, restaurant menus, flyers, and in emails to redirect victims to phishing sites or trigger malware downloads. This technique is called 'quishing' and is increasingly common.

How This Scam Works

Scammers print fake QR codes and place them over legitimate ones on parking meters, EV charging stations, restaurant menus, or public signage. When you scan the QR code expecting to pay for parking or view a menu, you are taken to a phishing site that mimics a payment page. You enter your credit card details, which the scammer captures. QR codes in phishing emails work similarly, bypassing email security filters that scan links but cannot read QR code images. Some QR codes trigger downloads of malware onto your phone.

Red Flags to Watch For

QR code sticker placed over another QR code
QR code on a parking meter or public sign that looks added after installation
QR code in an email asking you to scan instead of clicking a link
URL preview after scanning does not match the expected website
Page immediately asks for payment information after scanning

Example Scam Messages

Sticker on parking meter: 'SCAN TO PAY' with QR code leading to fake-parking-pay.com instead of the city's payment system --- Email: 'Your Microsoft 365 password expires today. Scan the QR code below with your phone to update your password securely.' --- Flyer: 'FREE WiFi! Scan this QR code to connect' (leads to a credential-harvesting page)

What to Do If You Received This

Check if a QR code sticker has been placed over an original one
Preview the URL before opening it after scanning
Use the official app or website instead of scanning QR codes for payments
Do not scan QR codes in unsolicited emails
Keep your phone's operating system updated

What to Do If You Fell For It

Contact your bank if you entered payment information
Change passwords if you entered login credentials
Run a security scan on your phone
Monitor your bank statements for unauthorized charges
Report the fake QR code to the location owner (restaurant, parking authority, etc.)

How to Report This Scam

Report to the FTC at ReportFraud.ftc.gov
File a complaint with FBI IC3 at ic3.gov
Report physical QR code scams to local police
Alert the business or municipality where the fake code was placed

Last updated: February 10, 2026