You pull up to a parking meter, see a QR code that says “Scan to Pay,” and figure it’ll save you from digging for quarters. But that little square could send you to a fake website designed to steal your credit card information.
The Federal Trade Commission (FTC) warned on September 3, 2026, that scammers are sticking their own QR codes over legitimate ones on parking meters.
Here’s how the scam works, how to avoid it, and what to do if you’ve already entered your payment information.
How Does the Parking QR Code Scam Work?
Scammers print QR code stickers and place them on parking meters, sometimes covering legitimate payment instructions.
When you scan one, it may open a fake website designed to look like an official parking payment page.
You enter your credit or debit card information, thinking you’re paying for parking. Instead, the information goes to a scammer.
And this isn’t just happening in one city.
In February 2026, officials in Asheville, North Carolina, discovered approximately 20 fraudulent QR code stickers on downtown parking meters. The stickers directed drivers to a fake website requesting credit card information.
According to the City of Asheville, its parking meters don’t use QR codes for payments at all. The city recommends paying directly at the meter or using its authorized payment options, including the Flowbird app.
Police in Ann Arbor, Michigan, also warned drivers about fraudulent stickers with friendly phrases like “Scan to Park!” and “Park AA.”
And in November 2024, Fort Lauderdale, Florida, warned that some fake QR code stickers even displayed the logos of legitimate parking apps.
That’s what makes this scam so convincing. The sticker is attached to an official parking meter, so it feels trustworthy.
Not every QR code on a meter is fake. Some cities and parking operators legitimately use them.
But it’s worth taking a few extra seconds to make sure you’re paying through an authorized service.
How Can I Protect Myself?
The safest approach is to avoid scanning unfamiliar QR codes when you can pay another way.
Pay directly at the meter, use an official parking kiosk, or open your city’s authorized parking app or website yourself.
You can usually find approved payment methods on your city’s official website.
And if a QR code looks like a sticker placed over another label, don’t scan it.
The FTC recommends several simple precautions:
- Check the link before opening it. Many phone cameras display a preview of the website address. Look carefully for misspellings, switched letters, or unfamiliar website names.
- Keep your phone updated. Install operating system and app updates to help protect against security threats.
- Use strong passwords. Avoid reusing the same password across important accounts.
- Turn on multi-factor authentication. This adds another security step when signing in, making it harder for someone to access your accounts with a stolen password.
It’s also smart to avoid downloading a parking app from a suspicious QR code. Instead, find the authorized app through your city’s website or your phone’s official app store.
Malicious links can sometimes lead to websites that attempt to install harmful software.
If you spot a suspicious sticker on a parking meter, report it to the city’s parking department or local police.
That could help prevent someone else from falling for the scam.
What If I Already Scanned a Fake QR Code?
First, don’t panic.
Scanning a suspicious QR code doesn’t automatically mean someone stole your credit card information.
What you should do next depends on whether you opened the website, entered personal information, or made a payment.
If You Only Scanned the Code
If you scanned the code but didn’t enter any information or download anything, close the suspicious website.
Don’t follow additional instructions, download apps, or respond to messages from the site.
Make sure your phone and apps are updated.
If you downloaded something suspicious, remove it and follow your phone manufacturer’s security guidance.
If You Entered Your Card Information or Paid
If you entered payment information or sent money, act quickly.
You may be able to dispute the charge or recover your money, depending on how you paid. However, a refund isn’t guaranteed.
Here’s what the FTC recommends doing if you’ve been scammed:
- Contact your credit card company or bank immediately. Use the number on the back of your card or the official banking app. Explain what happened, report any unauthorized charges, and ask whether the payment can be reversed.
- Report payments made through an app. If you used PayPal, Venmo, Cash App, or another payment service, contact the company and ask whether the transaction can be reversed.
- Don’t send more money. If the fake website asks for another payment or additional personal information, don’t respond.
- Change compromised passwords. If you entered a username and password, change that password immediately. Change it anywhere else you’ve used the same one.
- Review your accounts. Watch your bank and credit card statements for unfamiliar transactions.
- Report the scam to the FTC. Visit ReportFraud.ftc.gov to submit a report.
The sooner you contact your bank or payment provider, the sooner they can explain your options and help you protect your account.
If you entered your Social Security number or other sensitive identifying information, visit IdentityTheft.gov.
This official FTC website can help you determine what steps to take to protect yourself, even if you don’t yet know whether someone has misused your information.
It also provides a personalized recovery plan if you’ve experienced identity theft.
You can check for unfamiliar accounts or activity by reviewing your credit reports.
Our guide explains how to get a free credit report without paying or getting tricked.
For more ways to protect your personal information, check out our tips on protecting yourself from data breaches.
Relief Recap
Fake QR codes on parking meters can lead to fraudulent websites that steal payment information or money.
The easiest way to protect yourself is to pay directly at the meter or open your city’s official parking app yourself instead of trusting an unfamiliar QR code.
If you accidentally scan a suspicious code, remember that scanning alone doesn’t necessarily mean your information was stolen.
But if you entered your card details, sent money, or shared a password, contact the appropriate company right away and take steps to protect your accounts.
A few seconds spent checking how you’re paying for parking could save you from a much bigger financial headache.
