The laundry room is one of the last places you'd expect a scam. You're just trying to wash your clothes. QR code scams at laundromats and apartment complexes take advantage of exactly that assumption — a low-stakes, routine errand where your guard is completely down.
Here are the three most common attacks targeting renters, and what to check before you scan.
1. Sticker QR codes placed over legitimate payment codes on washers and dryers
CSC ServiceWorks, Coinmach, and PayRange are the dominant laundry payment platforms used in apartment buildings and laundromats across the U.S. All three use QR codes as their primary payment method. Attackers know this — and place their own sticker QR codes directly over the originals.
The replacement sticker looks identical to the real one. You scan it, expect a payment screen, and get one — but it's a fake form harvesting your card number. The charge is typically small ($2–$5 per cycle), which makes victims less likely to dispute or even notice. Meanwhile, the captured card number and billing address can be used for much larger unauthorized charges later.
Before scanning: Run your finger over the entire QR code area. A raised edge, visible adhesive border, or sticker that peels slightly at a corner indicates something placed on top. Compare the code to others on nearby machines — if they look different, alert the property manager or laundromat staff immediately. When in doubt, download the official service app and use it to locate and pay for the machine by ID number instead of scanning anything on the machine itself.
2. Fake apartment-complex utility-payment QR codes
This variant targets renters who pay utilities or laundry fees directly to their building management. Attackers slip fake payment notices under apartment doors or post them on lobby and mailroom bulletin boards.
The flyers are convincing — they use the building's name, a professional layout, and urgent language ("Your laundry account balance is overdue — scan to pay before service is suspended"). The QR code leads to a fake payment portal that collects your card details and disappears.
Real building management companies process payments through established portals — RealPage, AppFolio, Yardi — with consistent branding you've seen before. If you receive a payment notice you weren't expecting, call the leasing office directly using the number on your lease — not the number on the flyer — to verify it before scanning anything.
3. Fraudulent "register for laundry credits" flyers in common areas
Attackers place promotional flyers in laundry rooms, mailrooms, and lobby bulletin boards advertising free laundry credits or a resident loyalty program: "Scan to register and get your first load free." The QR code opens a form asking for your name, email, unit number, and a card to put on file — none of which goes to the real building management or laundry service.
This variant works because it mimics a real offer buildings sometimes make to new residents. Renters see it as an upside — free credits — rather than a threat.
If a promotional offer isn't mentioned in any communication from your leasing office, treat it as suspicious. Ask the property manager whether the offer is real before scanning.
Why renters on tight budgets are the target
Shared laundry is almost exclusively a renter environment — and renters, particularly in urban apartment complexes, often have less financial cushion to absorb unexpected fraud. Attackers factor this in: a $3 laundry charge feels too small to dispute, but a fraudulent payment form can capture the full card number and billing address for much larger future use.
The low-stakes framing of "just doing laundry" also means victims rarely check the destination URL before entering payment details. They expect a payment screen, they get a payment screen, and they pay. That predictability is exactly what makes this attack consistent.
How QRsafer protects you at the laundry room
Scanning any laundry QR code with QRsafer before tapping through takes the same two seconds as scanning directly with your camera. QRsafer checks the destination URL against threat intelligence databases and returns a Safe, Risky, or Dangerous verdict before anything opens in your browser.
Phishing pages — including freshly registered fake payment portals — flag immediately. If a code points to a domain that doesn't match the official laundry service, QRsafer shows you before your card details ever leave your phone.
If you've already scanned and entered payment information, see what happens when your card info is captured on a phishing page and review our EV charger scam guide for a similar attack where payment sticker fraud is common on charging kiosks.
Quick checklist for renters
- Machine codes: Run your finger over the sticker — any raised edge means tampering
- Payment notices under your door: Call the leasing office to verify before scanning
- Lobby flyers offering free credits: Ask staff whether the promotion is real
- Any laundry QR code: Use QRsafer first — a two-second check is all it takes
Laundry is routine. Scammers count on that. A quick verification breaks their model and costs you nothing.
See also
- How to Spot a Malicious QR Code Before You Scan
- EV Charger QR Code Scam
- Fake Parking Meter QR Code Scam
- QR Code Credit Card Scam
- QR Code Threat Map
Download QRsafer for iOS or Android and use it every time a QR code asks for your card.