QR Code Scam

How it works

Scammers place their own QR codes on parking meters, flyers, letters, or emails, sometimes over the real one. When you scan it with your phone, it opens a fake website that asks for your payment or login information, or quietly installs harmful software. The code hides where it really goes, so you can't tell it's fake until it's too late.

Warning signs

• A QR code sticker placed over another one
• QR code in an unexpected email or letter
• Scanning leads to a login or payment page
• The web address after scanning looks wrong
• Urgency to scan and pay quickly
• Code offers a prize, refund, or parking payment

What to do

• Pause before scanning codes in public or in messages.
• Check the web address before entering any information.
• Type known websites in yourself instead of scanning.
• Do not enter passwords or card details from a scanned page.

If they are still on the line: Do not enter any information on a page you reached by scanning an unexpected code. Close it. Go to the real website directly instead.

How to report it

Report to the FTC at ReportFraud.ftc.gov or 1-877-382-4357, and to the FBI at ic3.gov. For elder-specific help, call the DOJ Elder Fraud Hotline at 1-833-372-8311.