That Parking QR Code Is A Scam — How To Tell

You pull up, find a spot, and the parking meter tells you to scan a QR code to pay. It feels quick and normal — that is exactly why it works. In September 2026 the Federal Trade Commission warned that scammers are covering up legitimate QR codes on parking meters with stickers of their own. Scan the wrong one and you land on a fake payment site built to steal your money, your personal information, or both. The good news: this one is easy to spot once you know what to look for.

What Arrives

Nothing arrives in your inbox for this scam — it is waiting for you on the street. A printed QR code sticker is placed over, or right next to, the real code on a parking meter or pay station. You scan it expecting the city's payment page, enter your card to pay a few dollars for parking, and the payment goes to the scammer instead. Your parking was never actually paid, either.

The same trick shows up in other places, too. The FTC has also warned about QR codes sent by text or email with an urgent story attached, and about codes on unexpected packages inviting you to scan to find out who sent it. A QR code hides where it leads — you cannot see the address until after you scan — and that hidden step is the whole trick.

The 5 Red Flags

1. The code looks like a sticker on top of another sticker. Peeling edges, a second code underneath, or a label that looks pasted on is the biggest warning sign of all.
2. The preview link looks off. Many phones preview the web address after you scan, before you open it. Check it slowly — misspellings, switched letters, or a name that is close to, but not exactly, the parking service you expected means stop.
3. It asks for more than parking money. A parking payment needs a card and a plate number. It never needs your bank login, your full Social Security number, or your email password.
4. There is pressure to hurry. Warnings about fines, towing, or expiring time push you to pay before you think. Real meters do not threaten you through a QR code.
5. It is the only way offered. If a meter that normally takes coins, a card, or a known parking app suddenly only offers an unfamiliar QR code, be suspicious and choose another way to pay.

What Real Parking Payment Actually Does

A real city or parking operator sends you to its own official payment page or its official app — the same name you see on the meter signage, spelled exactly right. The payment confirms your parking session, so the city system knows your car is paid for. A fake sticker page cannot do that: it takes your card details and gives you nothing the city can see, which is why people in these reports ended up both out money and still owing for parking.

What To Do Instead

• Look before you scan. Run a finger over the code. If it is a sticker over another code, do not scan it. Peel back nothing — just do not use it.
• Preview, then decide. After scanning, read the web address your phone shows before tapping to open it. If anything looks misspelled or unfamiliar, close it.
• Pay another way. Use coins or a card at the meter if it offers them, or open the city's official parking app or website yourself, typed in by you — not through the code on the meter.
• Keep your phone updated. The FTC recommends keeping your phone's system and apps up to date, using strong passwords, and turning on multi-factor authentication where you can.

Already Scanned, Tapped, Or Paid? Do This Next

First, take a breath. These stickers fool careful people every day — they are designed to look like part of the meter. Getting one wrong says nothing about you. Then move in this order:

1. Bank first. Call your bank or card company right away using the number on the back of your card. Tell them what you entered, ask them to block or replace the card if needed, and review your transactions together for charges you did not make.
2. Change your passwords. If you entered a username or password on that page, change it immediately — and anywhere else you reuse that same password, starting with your email.
3. Get your device checked. Do not contact anyone through the fake site. Have your phone looked over, watch your statements closely in the days ahead, and report it to the FTC at ReportFraud.ftc.gov.

Got a weird text? Describe it in the comments and we'll check it

🧙 AOP3D Tech — Rockport's Tech Wizards · Text 781-507-1606 · aop3d.com