See a QR Code on a Parking Meter? The FTC Says Check It Before You Scan

September 24, 2026

A QR code on a parking meter can make paying for a spot feel almost effortless. Point the phone, scan the square, enter payment details, and get back to whatever brought you downtown.

There is one small step worth adding before the scan: look closely at the code and the payment instructions first. The Federal Trade Commission warned in September 2026 that scammers have covered legitimate parking-meter QR codes with fraudulent ones. That fake code can send a driver to a website designed to steal money or personal information.

The scam works partly because parking payments create the perfect environment for rushing. A driver may stand beside a busy street, watch the meter clock, and simply assume the code attached to the machine belongs there. That assumption can turn a routine parking fee into a phishing trap.

The QR Code May Be the Part You Should Distrust

QR codes themselves are not dangerous. They simply direct a phone to information or a website. The problem starts when someone replaces a legitimate code with one that leads somewhere else.

The FTC has received reports of scammers placing their own QR codes over legitimate parking-meter codes. A driver who scans the replacement may land on a fake payment page that looks convincing enough to encourage a credit card number, login credentials, or other personal information. The FTC has also warned that malicious QR codes can lead to sites that attempt to install malware.

That makes the physical condition of the meter worth a quick inspection. Look for a sticker that appears layered over another sticker, strange placement, crooked edges, mismatched colors, or instructions that seem unrelated to the rest of the machine.

A damaged or altered-looking meter does not automatically prove fraud. It simply gives you a reason to stop and verify the payment method through another source.

Your Phone Can Give You a Clue Before You Open Anything

One of the most useful details in the FTC warning involves something many people skip: the link preview.

Many QR readers show the web address associated with a code before opening the page. That creates a brief opportunity to inspect the destination rather than blindly tapping through. The FTC recommends checking the URL for misspellings, switched letters, or other signs that the address does not match the legitimate service.

That check matters because a scam website does not need to look obviously fake. A page can copy familiar logos, colors, buttons, and payment screens while quietly sending the information somewhere it does not belong.

A strange-looking web address deserves attention. So does a legitimate-looking address with one altered character. If the meter identifies a parking operator or city service, compare the destination with the official name shown on the meter or verify the payment method through the municipality’s known website.

Do not use contact information supplied by a suspicious QR page to verify the page itself. That would be like asking the person at the door whether the door belongs to them.

A Payment Page Asking for More Information Deserves a Pause

Parking usually requires a relatively simple transaction. That makes an unexpected request for extra information worth questioning.

If a QR-linked page suddenly asks for account credentials, sensitive personal information, or details that seem unrelated to paying for a parking session, stop before entering anything. The FTC warns that scammers use spoofed websites to collect information people type into them.

The same caution applies if the page creates unusual urgency. A parking meter can certainly have a time limit, but that does not mean a legitimate payment service needs to frighten you into clicking.

There may also be another payment option. Depending on the parking system, a driver might find instructions on the physical meter, posted signage, a municipal website, or an established parking application. Checking one of those sources can take a little longer, but it avoids trusting a questionable sticker simply because it happens to sit on the machine.

What If the Scan Already Happened?

A mistaken scan does not automatically mean someone stole anything. The next steps depend on what happened after the scan.

If the QR code opened a suspicious page but you did not enter information or download anything, close it and avoid interacting with the site. The FTC specifically advises consumers not to communicate with a scammer through a suspicious website.

If you entered a username or password, change that password immediately. Use a different password for every important account, especially if you reused the exposed password elsewhere. The FTC also recommends using strong passwords and multifactor authentication to protect accounts.

If you entered payment information, keep a close eye on your bank or credit card transactions. The FTC recommends reviewing statements for transactions you did not authorize.

If money or sensitive information changed hands, report the scam to the FTC through ReportFraud.gov. Acting quickly can also help you identify what accounts or payment methods need attention.

A Two-Second Inspection Can Change the Whole Transaction

QR payments work because they remove friction. That convenience also creates a habit of scanning first and thinking later.

A parking fee may only cost a few dollars. A stolen card number, compromised password, or exposed personal information can create a much bigger headache. Spending a few seconds checking the code is a small price for keeping a routine parking payment routine.

Would you feel comfortable scanning a QR code on a parking meter after seeing this warning, or would you choose another payment method? Share your thoughts in the comments.