2026-10-26
QR Code Scams: Check Before You Pay for Parking
By Toukir Bin Islam
A QR code on a parking sign can feel more trustworthy than a link in an unexpected text. But the code itself does not verify who will receive your information or payment. Treat it as a shortcut to a website, not proof that the website is legitimate.
The Federal Trade Commission warns that scammers hide harmful links inside QR codes, including codes placed over legitimate ones. Here is a practical check before you pay.
Inspect the sign and preview the destination
Look for an unexpected sticker, a covered code, or payment instructions that appear inconsistent with the rest of the sign. These are reasons to verify the operator, although a clean-looking sign is not a guarantee.
When your phone shows the destination address, read it before opening the page. Watch for misspellings and unfamiliar domains. A secure connection or padlock does not establish that the business behind the page is genuine.
Use an independently verified payment route
If something looks wrong, find the parking operator's official website or app independently. Check that the location or zone number matches where you parked. Use an available payment machine if you can verify that it belongs to the operator.
Do not use a telephone number from a suspicious sticker as your only verification. Compare it with information from the operator's official site or another trusted source.
Pause before entering personal information
A payment page should make sense for the transaction. Be cautious if a parking payment suddenly asks you to install software, provide unrelated account credentials, or complete unusual verification steps.
The same habit applies to codes in messages and unexpected deliveries. The FTC also warns about QR codes included with unsolicited packages.
If you already entered information
Contact your card issuer if you supplied payment details. If you entered a password, change it through the genuine service and review the account's security settings. Preserve the suspicious address and report the incident at ReportFraud.ftc.gov.
Takeaway: Verify the destination and the operator before paying. A QR code saves typing; it does not replace checking. Read the related phishing checklist for more warning signs.