Airports are one of the best environments scammers can ask for: thousands of tired, distracted people in a hurry, all looking for Wi-Fi and somewhere to charge their phone. QR codes are everywhere — posted at gates, printed on lounge passes, stuck to charging stations. Most are legitimate. Some aren't.
Here's what the scams look like and how to avoid them without slowing down your trip.
The fake Wi-Fi QR code
This is the most common airport QR scam and the one most likely to affect you.
A scammer prints a QR code and posts it near a gate, in a lounge, or above a row of seats with a sign that says something like "Free Airport Wi-Fi — Scan to Connect." Scan it, and you're joined to an attacker-controlled network — not the airport's actual infrastructure.
From there, they can:
- Intercept unencrypted traffic between your device and websites
- Capture session cookies from apps running in the background
- Redirect you to a login page that harvests credentials before connecting you to internet
The original airport Wi-Fi still works. You're just not on it.
What to do instead: Connect to airport Wi-Fi through the airport's official app, the network name listed on the airport's website, or the Wi-Fi portal you reach by opening a browser on the legitimate network. Never scan a QR code to join a network.
The gate change scam
Flight information changes constantly at airports — delays, gate switches, boarding time updates. Scammers exploit that anxiety.
The attack: a printout or screen near your gate shows a QR code alongside text like "Gate changed to B14 — scan for updated boarding pass" or "Flight delay — scan to rebook." The QR code leads to a phishing page designed to look like your airline's website.
Travelers who are rushing, already stressed, or whose phone battery is low are most vulnerable. They scan, enter their booking confirmation and name (or their airline account credentials), and hand over everything the attacker needs to take over the reservation.
What to do instead: Get flight updates only from the airline's official app, the departure board, or the gate agent. No legitimate airline communicates gate changes through a QR code posted at the gate.
Charging-station QR codes
USB charging stations at airports have long been a juice jacking concern. Now scammers are adding a QR code layer.
Some charging-station kiosks have been tampered with to display a QR code that claims to unlock faster charging, access lounge Wi-Fi, or download a companion app. The code routes to a malicious download or credential page.
What to do instead: Bring your own charging cable and use wall outlets rather than USB kiosks. If you use a kiosk, don't scan any QR code associated with it — the charging process needs no app.
Lounge and restaurant QR codes
Airport restaurants, bars, and lounges use QR codes for menus and payment — the same way restaurants everywhere do. The same sticker-swap attacks that happen in city restaurants happen here too, often with higher success rates because travelers are distracted and in a hurry.
Check for raised sticker edges before scanning any menu or payment QR. If you're paying via QR code, verify the merchant name before confirming.
Boarding pass and check-in QR scams
A less common but increasingly documented attack: scammers send phishing emails or texts that appear to be from your airline, asking you to scan a QR code to check in, confirm your seat, or download your boarding pass. This is a quishing attack aimed specifically at travelers.
Your boarding pass QR is already in your airline app or email. You don't need to scan anything new to board. Any communication asking you to "re-scan" or "verify" your boarding pass via a new QR code is a red flag.
For more on this pattern, see how email quishing works.
How QRsafer helps at the airport
Airports move fast and your attention is split. QRsafer adds a check between the moment you scan and the moment a page loads.
Scan any airport QR code with QRsafer and it returns a verdict — Safe, Risky, or Dangerous — before your browser opens anything. If the code points to a known phishing domain, a suspicious redirect, or a freshly registered lookalike, you'll know before you tap through.
It takes the same two seconds as scanning with your camera app. The difference is you know what you're about to open.
If something does go wrong, our guide on what to do if you scanned a suspicious QR code covers the steps to take immediately.
Quick checklist for your next trip
- Wi-Fi: Connect through the airline app or airport website — never a posted QR code
- Gate updates: Trust the departure board and gate agent only
- Charging: Use wall outlets and your own cable
- Menus and payment: Check for sticker-swap signs before scanning
- Boarding pass: Your pass is already in your app — ignore any request to scan a new code
The scams targeting airports work because travelers are distracted and time-pressured. A moment of verification before you scan is enough to break most of them.
See also
- How to Spot a Malicious QR Code Before You Scan
- Hotel QR Code Scams
- Car Rental QR Code Scam
- Package Tracking QR Code Scam
- QR Code Threat Map
Download QRsafer for iOS or Android and scan safer on your next trip.