Legal sports betting now operates in 38 states, and the industry generates tens of billions of dollars in annual wagers. That scale makes sportsbook brands — DraftKings, FanDuel, BetMGM, Caesars, ESPN Bet — among the most recognizable and most-impersonated names in scam QR codes.
The mechanics are straightforward: a QR code is free and trivial to generate, anyone can make one link to a convincing fake page, and millions of people are already primed to expect sportsbook promotions via their phones. Here are the four variants operating right now.
Variant 1: Fake sign-up bonus QR codes
The most visible variant circulates on physical flyers, bar coasters, stadium seat-back cards, and social media posts. The pitch is always a promotion: "$200 free bet," "100% first-deposit match," "bet $5 and get $150 in bonus bets."
The QR code links to a landing page that looks like the real sportsbook's sign-up flow — same color scheme, same logo, a registration form that collects your name, email, date of birth, last four of your Social Security number (standard for legal sportsbook ID verification), and payment method.
The difference: the URL in the address bar is not draftkings.com or fanduel.com. It might be draftkings-bonus.io, fanduel-promo.com, or a completely unrelated domain fronted by a convincing visual clone. The information you submit goes to the scammer, not the sportsbook. Your SSN fragment and date of birth are enough to begin identity fraud. Your payment details are captured immediately.
The tell: Before scanning any sports betting QR code — on a flyer, a coaster, a social post, or a promotional email — check the destination URL with QRsafer. If the domain isn't the official sportsbook's root domain, don't enter anything.
Variant 2: Fake deposit link QR codes targeting existing bettors
The second variant targets people who already have sportsbook accounts. A text or email arrives claiming to be from the sportsbook's support team: "Your account requires a security review before your next deposit," or "Scan to access your personalized deposit portal for faster funding."
The message looks legitimate — it uses the sportsbook's logo, mimics their email formatting, and references real features of the platform. The QR code links to a fake "secure deposit portal" that harvests your sportsbook login, your linked payment method, or both.
Real sportsbooks do send promotional emails. The difference is that a legitimate deposit or account action is always completed inside the official app, not by scanning a QR code sent in a message. If you receive a text or email with a sportsbook QR code for a deposit or security action, navigate to the app directly rather than scanning.
Variant 3: QR codes on pick-selling and sports handicapper services
This variant is less about credential theft and more about direct financial fraud.
Posts on social media — often Instagram, X, and sports betting subreddits — advertise services offering "guaranteed winning picks," "insider lines," or "algorithmic predictions" for a fee. A QR code in the post links to a payment page: scan to buy a package of picks for $50, $200, or more.
The picks services are almost universally worthless and sometimes fraudulent. The scam is the service itself, not a credential-harvest. Still, any payment page reached via an unsolicited QR code carries the additional risk of phishing on top of the fraudulent service — some pages collect card details without delivering anything.
Legitimate handicapping services exist, but they don't market themselves via cold-contact QR codes in sports betting communities.
Variant 4: Crypto deposit QR codes in Discord and Reddit communities
The fourth variant targets bettors in sports betting Discord servers and subreddits. A message — often from what appears to be a moderator or a trusted long-time member — shares a QR code claiming to be a "verified crypto deposit address" for funding a sportsbook account faster, avoiding banking restrictions, or accessing an exclusive offshore book with better lines.
Scanning the QR code presents a wallet address. Any crypto sent to that address goes directly to the scammer and is irreversible by design.
This attack is a direct application of the broader crypto QR code scam pattern. No licensed US sportsbook asks you to fund your account by sending crypto to a wallet address presented via QR code in a chat. Licensed books accept deposits through vetted payment processors — credit cards, debit cards, PayPal, wire transfer, or the sportsbook's own VIP Preferred system — all inside the official app.
What to do if you scanned a sports betting QR code and submitted information
If you entered sportsbook credentials (login, password):
- Change your password immediately at the real sportsbook's official site or app.
- Enable two-factor authentication.
- Check your account for unauthorized withdrawals or changes to your linked payment methods.
- Contact the sportsbook's customer support to flag the incident — they can lock the account temporarily while you secure it.
If you entered payment or identity information:
- Contact your bank or card issuer immediately and describe the situation as a suspected phishing event.
- Monitor your credit for new accounts opened in your name.
- If you provided a Social Security number, place a free fraud alert at Equifax, Experian, or TransUnion — all three agencies are required to alert the others.
If you sent crypto:
- The funds are almost certainly unrecoverable. Report the scam to the FTC at ReportFraud.ftc.gov and to the FBI's Internet Crime Complaint Center at ic3.gov.
- Document the wallet address, any messages you received, and the transaction ID from your crypto wallet.
The one rule that prevents all of these scams
Real sports betting apps never require you to scan a QR code to make a deposit, sign up, or resolve an account issue. Every legitimate action on DraftKings, FanDuel, BetMGM, Caesars, or ESPN Bet happens inside the official app downloaded from the App Store or Google Play — not through a QR code sent in a message or posted on a flyer.
See also
- What to Do If You Scanned a Suspicious QR Code
- Crypto QR Code Scams
- Reddit QR Code Scams
- Steam Gift Card QR Code Scam
- Discord QR Code Scams
Download QRsafer for iOS or Android and preview the destination URL of any sports betting QR code before your browser opens it. Two seconds of checking is the difference between a bonus and a stolen account.