QR codes are everywhere when you travel. They open boarding passes, hotel menus, parking meters, baggage claims, Wi-Fi portals, transit tickets, resort apps, and restaurant tabs.
Most travel QR codes are routine. The problem is that travelers scan quickly, often while tired, distracted, in a line, or dealing with weak cell service. Scammers use that pressure to slip fake QR codes into normal travel moments.
Use this guide by trip stage.
Before the trip: booking, check-in, and itinerary messages
The safest QR codes usually appear inside apps you opened yourself: your airline app, hotel app, rental car app, parking app, or ticket wallet. The riskier ones arrive in messages that create urgency.
Watch for:
| QR code location | Common scam | Safer check | | --- | --- | --- | | Airline check-in text | Fake check-in or seat upgrade fee | Open the airline app or type the airline domain directly | | Hotel confirmation email | Fake deposit, cancellation, or room upgrade link | Confirm through the hotel app or reservation number | | Rental car message | Fake damage fee or add-on insurance payment | Use the rental company app or staffed counter | | Event or attraction ticket | Fake ticket transfer or refund page | Verify inside the ticketing app |
If the QR code asks you to log in, pay an unexpected fee, or enter passport details, do not continue from the QR page. Go to the official app or typed website instead.
Related: airport QR code scams, airline baggage QR code scams, and rental car QR code scams.
At the airport: kiosks, baggage, Wi-Fi, and lounge signs
Airports are QR-dense and high-pressure. You may see codes at self-service kiosks, baggage desks, parking shuttles, airport lounges, restaurants, and gate signage.
Real airport QR codes usually have context: they appear on official screens, inside the airline app, on printed boarding materials, or on airport-operated signs. Fake ones are more likely to appear as loose stickers, table cards, flyers, or texts sent outside the app.
Before scanning, check:
- Does the code sit on an official screen or a sticker placed over another code?
- Does the previewed domain match the airline, airport, lounge, or known vendor?
- Is the page asking for payment before it shows a real reservation, bag, or ticket?
- Is a staff-assisted option available if the code feels off?
For public Wi-Fi, verify the network name with airport signage or staff. A rogue hotspot can use a familiar airport name and a QR code to push you into a fake captive portal.
Parking, transit, and rideshare codes
Travelers often scan payment QR codes under time pressure: parking lots, train stations, ferry docks, bus stops, rideshare pickup areas, and bike rentals.
These codes are practical targets because they are public, unattended, and easy to cover with a sticker.
Use this payment check:
- Inspect the physical sign for sticker edges, bubbles, mismatched print quality, or crooked placement.
- Preview the destination before opening it.
- Confirm the zone, lot, vehicle, route, or station matches where you are standing.
- Avoid pages that ask for a password, account login, or more personal information than payment requires.
- If the payment page looks wrong, use the official app listed on permanent signage or pay at a staffed booth.
Related: fake parking meter QR code scams, public transit QR code scams, and rideshare pickup QR scams.
At the hotel: rooms, menus, Wi-Fi, checkout, and invoices
Hotels use QR codes for Wi-Fi instructions, room service, restaurant menus, spa bookings, checkout, surveys, and local recommendations.
The safer version is a code printed on permanent hotel materials or shown inside the hotel app. The risky version is a sticker on the TV card, desk sign, elevator flyer, or text message claiming you owe a fee.
Red flags:
- The QR code opens a payment page before showing your room or reservation.
- The page asks for your hotel login, passport scan, or full card details for a simple menu.
- The domain does not match the hotel brand, property group, or known booking provider.
- The code appears on a loose flyer slipped under the door.
If the QR code relates to payment, billing, checkout, or identity, call the front desk from the room phone or walk to the desk. Do not use the phone number printed on the suspicious QR page.
Related: hotel QR code scams, QR code scams when traveling abroad, and hotel room QR code scams.
International travel: when QR codes handle everyday payments
In some countries, QR codes are used for nearly every small payment. That does not make them unsafe by default. It does mean the fake-code risk moves into everyday moments: market stalls, tuk-tuks, ferry docks, temple entrances, parking areas, restaurants, and tourist attractions.
Before you leave:
- Install QRsafer before the trip so you can preview codes without searching for tools on unfamiliar Wi-Fi.
- Set up official airline, hotel, transit, and payment apps in advance.
- Enable roaming or a local SIM so you can verify domains and bookings.
- Save offline copies of reservations and tickets.
- Use staffed counters when a payment page does not clearly match the operator.
Same rule worldwide: if a QR code asks for a password, card, passport, one-time code, or app install in a moment that does not require it, stop.
Quick travel QR checklist
Use this before scanning any unfamiliar code:
- Is the QR code inside an app or on an official permanent sign?
- Does the domain match the airline, hotel, venue, or payment operator?
- Is the code a sticker over another sticker?
- Does the page show the correct reservation, table, zone, route, or merchant?
- Is it asking for sensitive data before showing the service?
- Is there a staffed counter or official app you can use instead?
QRsafer helps with the most important first step: showing the destination before a page, tracker, payment form, or login screen opens.
Download QRsafer for iOS or Android.