QR code scams on parking meters, packages and letters
A QR code on a parking meter, flyer, letter or unexpected package leads to a fake payment or login page.
Could you spot it?
3 quick examples. Decide scam or legit for each.
How it works
Scammers paste their own QR code over the real one on parking meters and pay stations, or put one in a package or letter you didn't expect. Scanning it opens a page that asks for your card details or sign-in, or installs malware.
A QR code is just a link you can't read. Treat it like a link from a stranger.
Red flags
- A sticker placed over another code, or a code that looks stuck on.
- A QR code in a package, letter or flyer you didn't expect.
- The web address shown when you scan isn't the official site.
- The page asks for card details or a password right away.
What it looks like
You park downtown. The pay station has this sticker on it.
PAY BY PHONE: FASTER!
Scan to pay for parking. Avoid a $65 citation.
Your phone shows: citypark-pay.co/zone4
The tells:
- A sticker added to the meter, not printed on it.
- The address your phone shows isn't the city's.
- A fine threat to hurry you.
A training example written for this site. Names, numbers and links are made up, and links are disabled.
What to do
- Before opening a scanned link, read the address your phone shows.
- Pay for parking through the city's official app or the meter itself.
- Don't scan codes from unexpected packages or messages.
If you already paid or shared information
- Contact the company you used to pay (your bank, card company, gift card company, payment app or wire service) right away and ask them to reverse the payment.
- If you shared a password, change it now and turn on two-factor authentication.
- If you gave out your Social Security number or other ID details, go to IdentityTheft.gov for a recovery plan.
- Report it to the FTC at ReportFraud.ftc.gov. For scams that happened online, you can also report to the FBI at ic3.gov.
From FTC: What to do if you were scammed.
Latest alerts about this scam
- FTC ·See a QR code parked somewhere? Don’t scan it…yet!
Ever tried to pay for parking and discovered you need to scan a QR code to pay? It seems like a convenient way to pay, but it turns out scammers like using QR codes, too.
- FTC ·That unexpected package you got could be a brushing scam
Did you get a package you didn’t order? It could be a brushing scam where a scammer uses your name to leave a fake review for that package you didn’t order.
Sources
- FTC: See a QR code parked somewhere? Don't scan it…yet!
- FTC: Scammers hide harmful links in QR codes to steal your information
- FTC: That unexpected package you got could be a brushing scam
Related scams
Prize and sweepstakes scams
You've won a prize, but you have to pay taxes, fees or shipping before you can collect it.
Utility shutoff threats
A caller or text from your “utility company” says service will be cut off within the hour unless you pay now.
Fake stores and too-good deals
An ad or website with prices that are too good to be true, from a store you've never heard of.