1. The Fake Parking Meter Payment
You’re in a rush and scan the QR code on a parking meter to pay quickly. The website looks legitimate, so you enter your credit card details. The problem? Scammers have placed a sticker with their own malicious QR code over the real one. This increasingly
common scam sends your payment and financial data directly to a criminal, not the city's parking authority. You lose money on the fraudulent transaction and may still get a real parking ticket. The Federal Trade Commission (FTC) has issued multiple consumer alerts about this specific tactic, noting that some cities have even removed QR codes from meters entirely to prevent confusion. Before you scan a public code for payment, always check for signs of tampering, like a new sticker placed over an older one.
2. Quishing (QR Code Phishing) Emails
You get an email from what looks like your bank, a streaming service, or even your IT department. It claims there’s a security issue with your account and instructs you to scan a QR code immediately to verify your identity or change your password. This is a scam known as “quishing”—phishing that uses a QR code. Because many email security filters are designed to spot suspicious text links, scammers embed the malicious link in an image of a QR code to bypass them. Scanning it leads to a phony login page designed to steal your credentials. A legitimate company will rarely, if ever, ask you to verify account security by scanning a QR code in an unsolicited email. When in doubt, log in to your account directly through the official website or app, not through a link or code in an email.
3. The 'Missed Delivery' Deception
A notice appears on your door or in a text message claiming you missed a package from a major carrier like UPS or Amazon. To reschedule delivery, the message urges you to scan an included QR code. This scam preys on the anticipation of receiving an order. The QR code directs you to a fake tracking website that mimics the real carrier's site. It then prompts you to enter personal information, like your name, address, and phone number, or even pay a small “redelivery fee.” Once you provide your credit card details, the scammers have everything they need for identity theft or fraudulent charges. The FBI and U.S. Postal Service have issued warnings about these scams, advising consumers to be wary of any unexpected delivery notifications, especially those that pressure you to act quickly.
4. The Malicious Wi-Fi Connection
You’re at an airport, cafe, or hotel and see a flyer with a QR code offering free Wi-Fi access. Scanning it seems like an easy way to get online, but it could be a trap. Malicious QR codes can be used to automatically connect your device to a fraudulent Wi-Fi network controlled by a hacker. Once connected, the scammer can monitor your online activity, capture unencrypted data like passwords and financial information, or redirect you to malicious sites. In some cases, scanning the code can even initiate a malware download directly to your phone. Before connecting to any public Wi-Fi, especially via a QR code, confirm the network name is legitimate with an employee at the establishment.
5. The Fake Charity Donation
Scammers often exploit generosity, especially during holidays or after natural disasters, by creating fake donation portals. They distribute flyers and social media posts with QR codes that appear to lead to legitimate charities like the Red Cross or other relief organizations. When you scan the code, you're taken to a convincing but fraudulent webpage that accepts your “donation.” Your money goes straight to the scammer, and your payment information is compromised. To avoid this, be skeptical of unsolicited donation requests. If you want to contribute to a cause, ignore the QR code and navigate directly to the charity’s official, verified website to make a secure donation.
