Scam alert
That QR Code on the Parking Meter Might Be a Sticker Put There by a Scammer
The FTC says crooks are covering real parking QR codes with their own. One scan can send you to a fake payment page built to drain your card.
Paying for parking used to mean coins or a card slot. Now many meters and lots ask you to scan a QR code with your phone. It's quick and convenient — and the Federal Trade Commission says scammers have noticed.
In a recent consumer alert, the FTC warned that people have reported scammers covering up legitimate QR codes on parking meters with QR codes of their own. Scan the fake one, and you can land on a website designed to steal your money, your personal information, or both.
Why it works so well
A QR code is just a picture. You can't tell by looking at it where it will send you, and a printed sticker on a meter looks official enough when you're in a hurry, it's raining, or a parking attendant could show up any minute. The fake page usually looks like a normal payment site, so you enter your card number without a second thought. It's the same trick as the fake toll text messages: a small, believable payment request that's really about grabbing your card details.
Look closely at the code itself. A sticker that sits on top of the sign, peels at the edges or looks slightly off is a reason to stop.
Before opening a link, check the web address preview your phone shows after scanning. The FTC advises looking for spelling mistakes or switched letters.
How to pay for parking safely
If there's another option — the card reader on the meter, coins, or the city's official parking app downloaded from your phone's app store — use it. If you do scan a code, read the address before you tap, and close the page if anything looks wrong. The FTC also recommends keeping your phone's operating system and apps updated, and protecting your accounts with strong passwords and multi-factor authentication.
Think you scanned a fake code?
- Don't contact anyone through the suspicious website — they may try to get more money or information from you.
- If you entered a username or password, change it right away everywhere you use it.
- Check your credit card and bank statements for charges you didn't make, and call your bank if you see any.
- Report it at ReportFraud.ftc.gov.