--- title: "QR code scams (quishing): how to stay safe | TapSafely" url: https://tapsafely.com/scams/qr-code-scams source: TapSafely description: "Fake QR codes stuck on parking meters or sent in emails can lead to phishing sites. How to scan safely." --- [Home](https://tapsafely.com/)/[Scam guides](https://tapsafely.com/scams/)/ QR code scams (“quishing”) # QR code scams (“quishing”) A QR code on a parking meter, a restaurant table or in an email looks harmless, but you can't see where it leads until you scan it. Scammers use that. By the TapSafely editorial team · Updated 16 September 2026 · 3 min read ## In short Fake QR codes stuck on parking meters or sent in emails can lead to phishing sites. How to scan safely. **Top warning signs:** A sticker placed over another code; An email asking you to scan a code to log in; The preview address doesn't match the organisation. **First thing to do:** Use the official app or type the official website address for parking and payments. Example · Email · Illustrative, links disabled IT Service Desk Your email password expires today. To keep access, scan the QR code below with your phone and confirm your login details. An example scam message with the warning signs highlighted. ## How the scam works Criminals stick their own QR codes over real ones on parking meters and charging points, or put codes in emails to get past security filters. The code opens a fake payment or login page. ## Red flags to look for - **A sticker placed over another code.** Look for tampering. - **An email asking you to scan a code to log in.** A common trick to move you from a protected computer to your phone. - **The preview address doesn't match the organisation.** Most phone cameras show the link before opening. Read it. ## What to do if you get one 1. Use the official app or type the official website address for parking and payments. 2. Before opening a scanned link, read the address in the preview. If unsure, copy it into our link checker. ## If you already paid or shared details ### Act quickly. It makes a difference. 1. Contact your bank if you paid or entered card details. 2. Change your password if you entered login details, and turn on two-step verification. 3. Tell the car park operator or venue about the fake sticker. More help: [what to do after a scam, and where to report it in your country](https://tapsafely.com/been-scammed). ## Official sources and further reading We check our guides against advice from government agencies and consumer protection bodies. - [Scammers hide harmful links in QR codes to steal your information](https://consumer.ftc.gov/consumer-alerts/2023/12/scammers-hide-harmful-links-qr-codes-steal-your-information) (US Federal Trade Commission) - [Unsolicited Packages Containing QR Codes Used to Initiate Fraud Schemes](https://www.ic3.gov/PSA/2025/PSA250731) (US FBI Internet Crime Complaint Center) - [QR codes, what's the real risk?](https://www.ncsc.gov.uk/blog-post/qr-codes-whats-real-risk) (UK National Cyber Security Centre) ### Got a message like this? Paste the message or link Check it free ### Still unsure? Describe what happened and our AI assistant will help, in any language. Ask TapSafely ### On this page 1. [How it works](#how) 2. [Red flags](#red-flags) 3. [What to do](#what-to-do) 4. [If you already paid](#already-paid) 5. [Sources](#sources) ### Seen this scam? Your report helps warn people in your area. [Report it](https://tapsafely.com/report?category=qr) ## Related guides [Guide ### “Unpaid toll” and parking-fine texts A text says you owe a small toll or parking fine and will face penalties unless you pay now. Here's how to tell fake tol… Read guide](https://tapsafely.com/scams/unpaid-toll-parking-texts)[Guide ### Phishing links and fake login pages Learn the one skill that stops most scams: reading who really owns a link. With examples of look-alike addresses and fak… Read guide](https://tapsafely.com/scams/phishing-links)[Guide ### Fake delivery texts and customs-fee scams Got a text saying your parcel is on hold until you pay a small fee? See how fake delivery texts work, the red flags, and… Read guide](https://tapsafely.com/scams/fake-delivery-texts)