You pick up dog food, browse cat toys, and swing by the grooming counter — and somewhere along the way, you scan a QR code. Maybe it was for the loyalty program at checkout. Maybe a tip code at the grooming counter. Maybe an adoption flyer posted near the door caught your eye. Pet stores are packed with QR codes, and most shoppers scan them without a second thought. That trust is exactly what scammers count on.
Major chains — PetSmart, Petco, Pet Supplies Plus — are frequently impersonated because their names carry immediate recognition and their loyalty programs have millions of enrolled members. Independent pet shops are targeted too, because they rely more heavily on printed signage and less on locked-down in-store technology. Here are the four pet store QR code scams showing up most often.
1. Fake loyalty app QR codes at checkout kiosks
Loyalty programs are the gateway scam at pet stores. Chains like PetSmart's Treats program and Petco's Vital Care use QR codes at checkout kiosks so members can scan in and apply rewards. Scammers place sticker QR codes — often printed to match the store's exact color scheme and branding — directly over the real code on the kiosk or the checkout counter signage.
Scan the fake code and you land on a convincing replica of the store's loyalty login page. You enter your email and password. The page might even display a generic "points applied" confirmation. Meanwhile, the attacker has your credentials and, if your account has a stored payment method, your card details.
What to do: Before scanning any loyalty QR code, run your finger over the surface and look for a raised edge or a sticker seam. If the page that loads doesn't match the store's verified domain (petsmart.com, petco.com, petsuppliesplus.com), close it immediately. The safest check-in method is opening the store's app directly — no scan required.
2. Venmo and Cash App tip code swaps at the grooming counter
Pet grooming is an intimate service. Groomers spend an hour or more with your dog or cat, and tipping is common. Many grooming departments — especially at chains and independent groomers — post a Venmo or Cash App QR code near the counter so customers can tip digitally.
This setup is trivially easy to tamper with. An attacker walks into the store, places a sticker QR code over the real payment code, and leaves. Every tip sent for the next several hours or days goes directly to the attacker's account instead of the groomer. The groomer doesn't know until they notice tips stopped coming in; the store often doesn't know until a customer asks.
What to do: After scanning any tip QR code, check the recipient name on the payment app's confirmation screen before tapping Pay. The name should match the groomer's name or the store's registered business name. If you see an unfamiliar personal name, stop and ask the groomer to confirm their account. See also: how Venmo QR code scams work.
3. Fake adoption listing QR codes that collect "hold deposits"
Many pet stores partner with local rescue organizations, posting adoption flyers on a bulletin board near the entrance or in the aisle where adoption events are held. These flyers often include a QR code linking to the rescue's website or a specific animal's adoption profile.
Scammers create their own printed flyers, sometimes mimicking the look of a legitimate rescue's branding, and post them in the same area. The QR code leads to a convincing fake rescue page showing photos of available pets. A form asks you to pay a "hold deposit" — typically $50 to $150 — to reserve your animal before you visit. The deposit goes to the attacker. The animal doesn't exist, and the rescue has no record of you.
What to do: Before paying any deposit through a QR code link, search for the rescue organization by name independently and contact them directly to confirm the listing. Legitimate rescues will have a consistent web presence. If the only way to reach the rescue is through the QR code link, treat it as a red flag. For more detail, see our page on pet adoption QR code scams.
4. Shelf-tag product-info codes disguised as recall alerts
Many pet stores and specialty shops use QR codes on shelf tags to link customers to nutritional information, ingredient lists, or brand websites. These are low-scrutiny scans — you're just looking up what's in the food. But they're also easy to tamper with.
Attackers replace legitimate shelf-tag QR codes with codes that direct to a page claiming there's an active product recall. The page asks you to "register your batch number to receive a replacement" or "confirm your address to receive a refund" — harvesting your contact information, email address, and sometimes payment details for the supposed shipping charge.
What to do: If a QR code leads to a page claiming a product recall, do not enter any information. Verify recalls independently at the FDA's official recall database (fda.gov) or on the manufacturer's website. Real recall programs don't require scanning a shelf-tag QR code to enroll.
Why pet stores are a high-risk QR code environment
Several factors converge to make pet stores unusually attractive to QR scammers:
- High scan frequency — loyalty kiosks, tip jars, adoption flyers, and shelf tags mean customers scan multiple codes per visit without thinking about it
- Emotional context — interactions involving pets (adoption, grooming, healthcare purchases) involve elevated emotion and lowered skepticism
- Mixed physical access — stores are open to the public, so attackers can walk in, swap a code in seconds, and leave undetected
- High impersonation value — large chains with well-known loyalty programs are easy to mimic and carry immediate trust
How QRsafer helps in the pet store
Opening QRsafer takes the same effort as opening your camera. Point it at any QR code — loyalty kiosk, tip jar, adoption flyer, or shelf product tag — and it checks the destination URL against threat intelligence databases before anything loads in your browser. A newly registered phishing domain or a mismatched URL surfaces immediately, before you enter any login, payment, or contact information.
If you've already scanned something that felt off, step through our complete recovery guide. For the broader retail context, see our guide on QR code scams at grocery stores.
Quick checklist for pet store shoppers
- Loyalty kiosks: Check for stickers over the original code; verify the URL matches the store's official domain
- Grooming tip codes: Confirm the recipient name on your payment app before tapping Pay
- Adoption flyers: Verify the rescue directly before paying any deposit; never pay through a QR link alone
- Shelf product tags: Cross-check any "recall" claims on fda.gov — don't submit contact info through a shelf-tag link
- Any unfamiliar code: Run it through QRsafer before tapping through
Your pet deserves the best care. Your financial and personal information deserves the same.
Download QRsafer for iOS or Android — check any QR code before you tap.