QR Code Scam (Quishing) — Why You Should Think Twice Before Scanning
You scanned a QR code at a parking meter, restaurant, or from a flyer, and it took you to a website asking for payment or personal information. Scammers are placing fake QR codes over real ones or sending them in the mail. Known as 'quishing,' this scam redirects you to phishing sites that steal your payment details.
Think this email is a scam?
Forward it to us and get a free risk assessment in under 60 seconds.
How This Scam Works
High Risk — QR Code Scams ('Quishing') Are Growing Fast
Scammers place fake QR codes over real ones at parking meters, restaurants, and public spaces. Always verify the URL before entering any information.
Note: This scam typically arrives via physical QR codes or printed materials, not email. If you received a suspicious email, forward it to check@scam.support for a free risk assessment. For QR code scams, report to the FTC (US) or Action Fraud (UK) — see all reporting agencies.
You scan a QR code at a parking meter, restaurant, or from a flyer, and it takes you to a website asking for payment or personal information. Scammers place fake QR code stickers over legitimate ones, or include malicious QR codes in mailings, flyers, and fake parking tickets. The scam — known as "quishing" (QR phishing) — redirects you to a phishing site that steals your payment details.
According to the FTC, QR code scams have been growing as a new attack vector. The FBI issued a warning in January 2022 about cybercriminals tampering with QR codes to redirect victims to malicious sites. Multiple US cities have reported fake QR code stickers placed on parking meters that direct people to fraudulent payment sites.
Red Flags
- QR code appears to be a sticker placed over the original code
- URL after scanning does not match the expected website
- Website asks for more personal information than expected
- QR code appears on an unsolicited flyer, letter, or email
- Payment page does not use the official website of the service
What You Should Do
What To Do
- Check the URL before entering any information after scanning a QR code
- Look for signs of a sticker placed over the original QR code
- Use official apps for parking payments rather than scanning QR codes
- If you entered payment details on a suspicious site, contact your bank immediately
- Report the fake QR code to the business or local authorities
Sources
- FBI IC3 Public Service Announcement (January 2022) — Cybercriminals Tampering with QR Codes to Steal Victim Funds
- FTC Consumer Information — Scammers hide harmful links in QR codes to steal your information