FTC Warns: Fake QR Codes on Parking Meters Can Steal Your Money and Information

Report Date: September 3, 2026

Source Classification: Official Government Warning

Scam Type: QR-code phishing / parking-payment impersonation scam

What happened

The Federal Trade Commission issued a consumer alert warning that scammers are covering legitimate QR codes on parking meters with fraudulent QR codes. A driver who scans the substituted code can be sent to a fake website designed to steal money, personal information, or both.

How the scam works

A consumer approaches a parking meter or payment station and sees a QR code that appears to be part of the normal payment process. The scammer's QR code has been placed over or in place of the legitimate code. Scanning it opens a fraudulent website that may imitate a real parking-payment page. The victim may then be prompted to enter payment-card details, login credentials, or other sensitive information, or may make a payment that goes to the scammer instead of the legitimate parking provider.

Who is targeted

The warning is especially relevant to drivers who use QR codes on public or private parking meters, parking kiosks, garages, and other pay-to-park locations. Anyone who assumes a physically posted QR code is automatically trustworthy can be targeted.

Warning signs

• A QR code appears to be a sticker placed over another label or code. • The link preview shows a misspelled domain, switched letters, or a web address that does not match the expected parking provider. • The site requests information or payment in a way that seems unusual for the location. • The page creates pressure to continue even though the web address looks unfamiliar.

What consumers should do

Before opening a QR-code link, inspect the link preview your phone or QR reader displays and look closely for spelling mistakes or switched letters. Keep your phone's operating system and apps updated. Use strong, unique passwords and multifactor authentication on important accounts. If a parking location offers another trusted payment method, such as an official app you already use or a meter interface you can verify, consider using it when the QR code looks altered or suspicious.

If you already scanned a suspicious QR code

Do not continue interacting with the suspicious website or anyone connected to it. If you entered a username or password, change the password immediately and change it anywhere else you reused it. Review your bank and credit-card transactions for unauthorized charges. Report suspected fraud to the FTC at ReportFraud.ftc.gov.

Why this matters

QR-code scams are particularly deceptive because the malicious link can be placed on a real-world object that consumers expect to trust. The physical parking meter may be legitimate while the code attached to it is not. That makes independent verification of the destination website just as important as checking an unexpected text message or email link.

Source attribution

Primary source: Federal Trade Commission, Consumer Alert, September 3, 2026 — “See a QR code parked somewhere? Don’t scan it…yet!” https://consumer.ftc.gov/consumer-alerts/2026/09/see-qr-code-parked-somewhere-dont-scan-ityet FTC fraud reporting: https://reportfraud.ftc.gov/

Think it might be a scam? Let AigiShield check it out for you.

Think Before You Click. Verify Before You Trust.