Are QR codes on scholarship or financial-aid flyers on campus safe to scan?

Not automatically. Scammers print and post convincing flyers — sometimes mimicking the school's own branding — with QR codes that link to credential-harvesting pages or fake application portals. Before scanning any financial-aid QR code from a flyer, verify the scholarship directly through your school's financial aid office or the official awarding organization's website. Legitimate opportunities won't require you to submit personal or banking information immediately after scanning.

What should I do if I scanned a tampered Wi-Fi QR code in a classroom or library?

Disconnect from that network immediately. If you logged into any accounts (email, student portal, banking) while connected, change those passwords right away. Report the suspected tampered code to campus IT so they can inspect and replace it. If you entered payment or Social Security information, place a fraud alert with the credit bureaus and notify your bank.

How can I tell if a textbook-rental or student-discount QR code is legitimate?

Use QRsafer to preview the destination URL before entering any personal or payment information. A legitimate textbook platform or campus discount will resolve to a recognizable, established domain. Red flags include a domain that was recently registered, a URL that doesn't match the company name on the flyer, or a landing page that asks for payment before showing any actual product or offer.

What should parents do if they think their college student scanned a fraudulent QR code?

Start by calmly asking what information they entered: login credentials, payment details, or nothing at all. If any credentials were shared, have them change those passwords immediately and enable two-factor authentication. If payment info was entered, call the card issuer to flag potential fraud. Encourage them to report the incident to campus IT and student affairs, and file a report at ReportFraud.ftc.gov if financial loss occurred.

QR Code Scams at Schools and Universities: What Students, Parents, and Staff Need to Know

You're late to your next class, you spot a flyer about a scholarship that covers next semester's tuition, and you scan the QR code in five seconds flat. That mix of financial pressure and time crunch is exactly what attackers exploit on college campuses. QR code scams targeting students, parents, and school staff have grown alongside the shift to mobile-first campus life — and the consequences can go well beyond a stolen credit card number.

Three Variants to Know

1. Fake scholarship and financial-aid QR codes on campus flyers

Financial stress is one of the defining features of the college experience. Scammers know this and craft flyers designed to look indistinguishable from legitimate department postings: official-looking logos, realistic award amounts, and a QR code to "apply now." The code leads to a fake application portal that collects Social Security numbers, bank account details, or login credentials.

These flyers often appear on bulletin boards near financial aid offices, in dormitory hallways, and on community boards in student unions. They're printed on ordinary paper and posted next to real announcements — which makes them easy to miss until you've already handed over sensitive information.

If you see a scholarship flyer and want to apply, navigate directly to your school's financial aid website or call the office to verify the award exists. No legitimate scholarship requires banking information at first contact.

2. Tampered classroom and library Wi-Fi QR codes

Most campus buildings display QR codes to simplify connecting to the university Wi-Fi. They appear on posters near entrances, on tables in the library, and on the walls of lecture halls. They're trusted by default — which makes them a useful target.

Attackers print QR code stickers and place them directly over the school's legitimate codes. The replacement connects your device to an attacker-controlled network rather than the campus network. Once you're on that network, the attacker can intercept unencrypted traffic, inject fake login pages, and harvest credentials from students who use it during a long study session.

Before connecting via a QR code Wi-Fi prompt, verify the network name against one you know is correct. When in doubt, ask a librarian or faculty member for the official network credentials. Report any code that looks like it has been stuck over another to campus IT immediately.

3. Fraudulent textbook-rental and student-discount QR codes

Textbook costs are a real financial burden, and discount codes promising 40% off a required course text or a first-month-free rental subscription are easy to believe. These QR codes circulate on campus bulletin boards, in Facebook student groups, and as flyers slipped under dormitory doors.

The destination is a convincing imitation of a real rental platform. You enter your credit card to "reserve your discount" and nothing arrives — or you're charged a recurring fee for a service that doesn't exist. Some variants collect your university login to "verify student status," then use those credentials to access your student portal, email, and any connected services.

Legitimate student discount programs are listed on your university's IT or bookstore page. If a deal isn't listed there, verify it before scanning by using QRsafer to preview the destination URL.

Why Students Are High-Value Targets

Students face a combination of factors that make them particularly attractive to scammers: limited income creates urgency around deals and free offers; frequent use of QR codes for dining, transit, and classroom tools normalizes quick scanning; and a rotating population of first-year students arrives every fall with less experience identifying campus fraud. For parents, that's worth a direct conversation before move-in day.

What to Do If You Already Scanned One

Change affected passwords immediately. If you entered any login credentials, reset them from a trusted network and enable two-factor authentication.
Call your card issuer. If payment information was entered, report potential fraud and request a new card number.
Report it to campus IT and student affairs. Schools track these incidents; your report helps protect other students.
File with the FTC at ReportFraud.ftc.gov.

For a broader look at what happens when you scan a malicious code, see our guide to what to do if you scanned a suspicious QR code. If the scam came through a fake job or internship offer rather than a campus flyer, our page on job offer QR code scams covers that variant in detail.

Check Before You Scan

Campus life moves fast — but two seconds with QRsafer before you tap a QR code can tell you whether the destination URL is what it claims to be. A real scholarship portal, a real rental platform, and the real campus Wi-Fi all resolve to domains you can verify. A scam usually doesn't.