Fake QR code scams usually work by replacing a legitimate code with a sticker or sign that sends you to a lookalike payment page. The safest approach is to slow down for a few seconds and check both the physical code and the link it opens before you pay, tip, or enter any personal details. For a deeper walkthrough and examples, visit the full guide.
At restaurants and tourist sites, look closely at table tents, posters, or placards. On parking meters, inspect the payment panel. Red flags include a QR sticker placed on top of another sticker, bubbled edges, mismatched branding, crooked placement, or signs of peeling. If the code looks newly applied or out of place compared to nearby meters or menus, treat it as suspicious.
After scanning, your phone typically shows the destination link. Confirm the domain is the official business, city, or transit authority site—not a random string of characters or a misspelling (for example, “paym3nt” or extra words like “-secure” added). Be cautious if the link uses unusual URL shorteners, prompts you to download an app immediately, or pushes you to act urgently.
A legitimate QR menu should not require your card number just to view food items. A legitimate parking payment page should clearly show the city/operator name, meter/zone details, and standard payment options. Warning signs include requests for sensitive info (PINs, full SSN, or bank logins), unexpected “verification” fees, or pages that don’t match the official branding you see on the meter or venue signage.
If possible, type the official web address manually, use a known app from your app store history, or pay at a kiosk/terminal. Inside restaurants, ask staff for a printed menu or to confirm the correct QR code. For parking, cross-check the meter number/zone within the official app or the city’s website.
Contact your card issuer immediately to dispute the charge and request a new card number if needed. Save screenshots of the page, the QR code location, and any receipts, then report it to the venue or local authority so they can remove the fraudulent sticker.
Leave a comment