Someone knocks. They have a clipboard, a professional-looking shirt, and a tablet already showing a QR code. "Just scan here to lock in your quote before I move to the next house." It feels quick, routine, official.
That pressure — the in-person authority dynamic, the manufactured urgency, the sense that everyone in the neighborhood is signing up — is exactly what door-to-door QR code scams are designed to exploit.
Variant 1: The fake salesperson's QR code on a tablet or flyer
The most common variant involves a person posing as a solar, pest control, home security, or roofing representative. They walk you through a pitch, then present a QR code on a tablet or a printed sheet to "start your free trial," "lock in the promotional rate," or "collect the deposit so we can hold your spot on the schedule."
You scan. The page looks like a payment portal — often professionally designed, with the company's logo. You enter your card details. A confirmation appears. The salesperson thanks you and leaves.
The company either doesn't exist or is a shell operation. The deposit is gone. The service never happens.
What to check: Before scanning, ask for a physical business card and look the company up independently on your phone — not using any link or QR code they provide. Check the domain in the QR code's URL before entering any information. If the company is real, the URL will match their official site.
Variant 2: Door-hanger flyers after a storm or disaster
After major hail, flooding, or wind events, fly-by-night contractors fan out through affected neighborhoods with door-hanger flyers promising fast, low-cost repairs. These flyers include QR codes to "schedule your free inspection" or "claim your storm discount."
The QR code leads to a convincing booking page. Homeowners enter their address and credit card to hold an appointment. The contractor either never shows, collects an upfront "materials deposit" and disappears, or does shoddy work and leaves before any issues surface.
These operations are transient by design — they move to the next storm-hit area before complaints accumulate.
How to protect yourself: After a storm, get repair quotes from at least three contractors. Verify each contractor holds an active license in your state (most state contractor boards have public lookup tools online). Never pay a deposit by scanning a QR code from a door hanger — call the company at a number you find independently and use a check or credit card through their official billing system.
Variant 3: Charity solicitors at the door with QR codes
Door-to-door charity solicitation is legitimate — and scammers know it. Fraudulent charity solicitors carry printed flyers or tablets with a QR code for a "donation portal." They may wear vests, carry ID badges, and cite recent disasters or local causes to create emotional urgency.
The QR code leads to a fake charity page designed to capture your card details and email address. The organization either doesn't exist or is a copycat of a real charity. Your money goes directly to the scammer.
The charity QR code scam page covers how to distinguish legitimate from fraudulent charity campaigns, including the IRS Tax Exempt Organization Search and Charity Navigator.
Why in-person scams work differently than digital ones
Online phishing relies on creating urgency through words. In-person scams add physical presence, eye contact, social pressure, and the sense that other people in the neighborhood are already participating. Victims often describe feeling rude or suspicious for asking questions — and scammers exploit that hesitation.
The solution isn't to distrust every salesperson. It's to slow down the one step they want you to rush: the payment. A legitimate company will never walk away from a sale because you asked for 24 hours to verify their license.
What to do if you paid via QR code and the company disappeared
If a deposit or payment was made through a QR code and the contractor or solicitor isn't responding:
- Contact your bank or card issuer immediately — report the charge as fraudulent. Act the same day if possible.
- File an FTC report at reportfraud.ftc.gov.
- Report to your state attorney general's consumer protection office — door-to-door fraud is specifically regulated in most states.
- Keep all evidence — photos of the flyer, the tablet screen, any business cards, and the URL from the QR code.
For business owners who receive fraudulent invoices with QR codes rather than physical door-to-door solicitations, the fake invoice QR code scam page covers the business email compromise variant.
How QRsafer helps
QRsafer checks the destination URL in any QR code against threat intelligence before your browser opens the page. A newly registered phishing domain — the kind a fly-by-night operation would set up a week before working your neighborhood — returns a Risky or Dangerous verdict before you enter anything.
Scan the code the same way you would. QRsafer adds two seconds between the scan and the page load — long enough to see a warning before any information is entered.
Before you scan any QR code from someone at your door
- Look up the company independently — never use links or QR codes they provide
- Check the URL the moment the QR opens — it should match the company's official domain
- Verify the license — contractor licensing board lookups are free and public
- Don't pay deposits via QR code — use check or credit card through official billing
- Ask for 24 hours — a real company will give it to you; a scam will evaporate
See also
- What to Do If You Scanned a Suspicious QR Code
- Charity QR Code Scam
- Moving Company QR Code Scam
- Fake Invoice QR Code Scam
- QR Code Threat Map
Download QRsafer for iOS or Android and add one extra check between the scan and whatever that code is trying to show you.