QR Code Scam

A malicious QR code — placed over a legitimate one on a parking meter, menu, or poster, or sent digitally — redirects victims to a fake payment or login page designed to steal money or credentials.

A scammer prints a fraudulent QR code sticker and places it over a legitimate one on a parking meter, restaurant menu, or event poster, or sends one directly in an email or flyer. Scanning it redirects the victim to a fake payment or login page that looks like the real service, where they're prompted to enter card details or account credentials that go straight to the scammer instead of the intended business.

• A QR code sticker looks slightly crooked or pasted over another one.
• The scanned link leads to a generic-looking or misspelled payment page.
• The QR code was in an unsolicited email, text, or unattended public flyer.
• You're asked for card details on a page that doesn't match the business's usual branding.

• Check for a sticker placed over another QR code before scanning in public.
• Preview the destination URL before opening it, if your camera app supports it.
• Avoid entering payment or login details on a page reached by scanning an untrusted QR code.
• Use the official app or website directly instead of scanning when possible.