How the sticker scam works
A scammer prints a QR code that leads to a fake payment or login page and sticks it over a genuine code in a public place. Parking meters and pay stations are common targets because people expect to pay there and are often in a hurry. The fake page may take a card payment, collect card details for later use, or sign the victim up for recurring charges.
The FBI’s Internet Crime Complaint Center warned about tampered QR codes in January 2022, and the FTC’s December 2023 consumer alert mentioned fake codes on parking meters.
How to spot a tampered code
Look at the code before scanning. A sticker with raised edges, a code that looks newer or a different style than the sign around it, or a second code layered on top are all warning signs. Then read the link preview and compare it with the operator’s name on the sign.
- Feel for a sticker edge or bubble over the code
- Compare the code’s look with the printed sign
- Check the previewed domain matches the operator
- Use the operator’s official app or website when unsure
Advice for businesses
Businesses and cities that display QR codes can reduce the risk by printing codes directly onto signs rather than using stickers, placing them behind clear covers, and checking them regularly. Printing the official web address next to the code gives customers something to compare against, and a recognizable domain makes a fake one easier to notice.