Payment QR codes are useful because they remove friction. You scan, the payment page opens, and the transaction feels quick.
That same speed is why scammers use them. A fake QR code can hide the destination until the moment you are already looking at a payment form, app prompt, or login page.
Use this guide before paying through a QR code at a parking sign, restaurant, checkout counter, invoice, event booth, refund page, or payment app.
Payment QR scam scenarios
| Scenario | Normal use | Scam pattern | |---|---|---| | Parking | Pay for a meter, lot, garage, or zone | Sticker code opens a lookalike parking page | | Restaurants | Pay the bill, order at table, tip staff | Table code routes to a fake checkout page | | Payment apps | Venmo, Cash App, PayPal, Zelle, Square | Recipient name does not match the merchant | | Invoices | Vendor payment or account portal | QR code in a fake PDF or overdue notice | | Checkout | Kiosk, pop-up, market, or small business payment | QR sticker over the approved payment sign | | Refunds | Return label, refund status, rebate, account credit | Page asks for card details to "release" money |
1. Parking payment QR scams
Parking is one of the highest-risk payment QR environments because signs and meters are often unattended. A scammer can place a sticker over a real code and send drivers to a lookalike page that asks for a card.
Before paying, check the parking app name, zone number, URL, and merchant name. If a parking sign claims to use ParkMobile, PayByPhone, Passport, or a city portal, the destination should match that provider or official city domain.
Related guides:
2. Restaurant and checkout QR scams
Restaurants, cafes, food trucks, markets, salons, pop-ups, and event booths often use QR codes for payment. Many are legitimate. The danger is a QR code that was not placed by the business.
Look for raised sticker edges, mismatched print quality, generic domains, and payment pages that do not show the business name. If the page asks for card details before showing an order, table, receipt, or merchant context, stop.
Start with Fake QR Code at Checkout or Restaurant QR Code Scams if the code was at a counter or table.
3. Payment app QR scams
Payment apps make QR codes feel normal. That creates a simple scam: swap the recipient.
The QR code may open Venmo, Cash App, PayPal, Zelle, Square, or another payment app with a recipient ready to pay. Before tapping Pay, verify the recipient name, profile photo, username, amount, and business account status. If the name does not match the person or merchant, do not send money.
Related guides:
4. Invoice and bill QR scams
A QR code on a bill or invoice feels official because it is surrounded by account numbers, due dates, logos, and payment language. Scammers exploit that trust with fake utility notices, medical bills, vendor invoices, service reminders, and overdue warnings.
Use a separate path before paying. Open the provider's official website or app and check whether the same balance appears there. Do not pay from a QR code just because a message threatens disconnection, penalties, late fees, or collections.
For more detail, read QR Code Bill Payment Scam, Fake Invoice QR Code Scam, and Utility Bill QR Code Scam.
5. Refund and return QR scams
Refund lures reverse the emotion: instead of asking you to pay, the page says money is owed to you. The scam page may ask for a card number, bank details, login, or "verification fee" to release a refund, rebate, return label, or account credit.
Real refunds normally happen inside the merchant's order history, payment app, or support flow. If you did not start the return or refund yourself, verify in the original account before scanning anything.
Related guides:
What to do if you already paid
- Open the payment app, bank app, or card account directly.
- Save the recipient name, merchant name, amount, transaction ID, URL, and QR code photo.
- Try to cancel the payment if it is still pending.
- Contact the app, bank, card issuer, merchant, or venue quickly.
- Report the fake QR code so the sign, invoice, or message can be removed.
For a broader cleanup path, use What to Do If You Scanned a Suspicious QR Code.
See also
- How to Spot a Malicious QR Code Before You Scan
- QR Code Threat Map
- Payment App QR Code Scam
- Fake QR Code at Checkout
- QR Code Credit Card Scam
Before paying through a QR code, preview the destination with QRsafer. Download it for iOS or Android.
Frequently asked questions
Can a QR code take money just by scanning?
Usually no. Scanning alone normally opens a payment app, payment page, or browser. Money moves after you confirm a payment, enter card details, approve a transfer, or sign in to a fake payment portal.
What is the most common payment QR code scam?
Sticker swaps are one of the most common physical-world payment QR scams. A fake code is placed over the real code at a parking meter, checkout counter, restaurant table, event booth, or kiosk.
What should I check before paying with a QR code?
Check the domain, merchant name, recipient username, amount, location, payment processor, and whether the same payment option appears inside the official app or website.
How can QRsafer help with payment QR codes?
QRsafer previews the destination and checks suspicious links before your browser opens the page, which helps you spot fake payment pages, short links, and mismatched domains before you pay.