QR Code Scams: Why That Parking Meter Sticker Could Cost You

QR codes are everywhere: restaurant menus, parking meters, flyers, package slips and even emails. They’re convenient — and that’s exactly why scammers use them. You can’t read a QR code with your eyes, so you don’t know where it’s taking you until you’re already there.

Using a QR code to trick someone is sometimes called “quishing” (QR + phishing).

Common QR code scams

• Stickers on parking meters and pay stations that send you to a fake payment page to steal your card number.
• QR codes in emails — often “scan to re-enable your account” or “scan to view your document.” Scammers use QR codes because email filters can’t easily read where they lead, and because you’ll open the link on your phone, away from your work computer’s protections.
• Codes on flyers, mailers and unexpected packages offering prizes, discounts or delivery updates.

How to scan safely

1. Look before you scan. Check for stickers, peeling edges or a code that looks added on top of signage.
2. Check the address before you tap. Most phone cameras show a preview of the web address. If it doesn’t match the business, don’t open it.
3. Use the official app or website for parking, utilities and payments instead of a code you found on the street.
4. Never scan a QR code in an email to sign in, verify an account or “fix” a problem. Go to the site yourself.
5. Don’t enter passwords or card numbers on a page you reached from a QR code unless you’re sure it’s legitimate.

If you already paid

Call your bank or card company right away to block the card and dispute the charge. If you typed in a password, change it and turn on two-factor authentication. Questions? Call us at 620-960-8711.