Concert QR Code Scam: What It Is and What to Do

Fake ticket QR codes sold before the show

The most common concert QR scam starts before you ever enter the venue. Scammers list fake tickets on Facebook Marketplace, Craigslist, Instagram, and Twitter at prices that are just low enough to feel like a deal. The “seller” sends you a screenshot of a QR code — or a PDF that looks like an official e-ticket from Ticketmaster, AXS, or Live Nation.

When you arrive and the gate scanner rejects your code, the seller is gone. In some cases, the fraudulent QR code was cloned from a real ticket that was already used, or it was purchased legitimately and then sold to multiple buyers — only the first scan at the gate works.

The rule: never buy concert tickets as a static QR image. Legitimate tickets are transferred through the official app — Ticketmaster's “Transfer Tickets” feature, AXS Mobile ID, or the venue's own app. If a seller can only give you a screenshot or a PDF, treat it as a scam.

Tampered QR codes inside and outside the venue

Once you're at the show, fraudulent QR codes can appear in several places:

• Seat-back stickers and table tents promoting “order drinks to your seat” or “skip the concession line” — these can be placed by scammers, not venue staff. Scanning opens a fake payment page that looks like a real food-and-beverage ordering system.
• Merch-drop flyers near the stage or exits advertising exclusive artist merchandise or limited-edition items available only “tonight via QR.” The page harvests your card details; the merchandise never ships.
• Wi-Fi QR codes on signs in the lobby or parking lot directing you to “free venue Wi-Fi” — the landing page is actually a credential-harvesting captive portal asking for your email and password.

Concerts are the perfect environment for this. Crowds are loud, excitement is high, alcohol is often involved, and most people scan without thinking because they're used to QR menus and mobile ordering. A sticker over a legitimate QR code is easy to miss in dim lighting.

Giveaway and presale QR codes on social media

Before major tours, scammers flood social media with posts impersonating the artist or the venue, announcing fake presales, VIP upgrades, or meet-and-greet giveaways. The post includes a QR code to “claim your spot” or “enter the contest.”

The landing page asks you to enter your email, phone number, and credit card to “verify your identity” or “cover a small processing fee.” Your information is harvested and the opportunity disappears. These posts often come from accounts with a large follower count and a blue checkmark — because on platforms like X (Twitter) and Instagram, verified status can be purchased or faked through account hijacking.

Legitimate presales and giveaways are announced on an artist's official website and through verified ticketing partners — never via a QR code posted on social media. If it requires scanning a QR code and entering payment information, it's a scam.

What to do right now

If you only scanned and closed the page without entering anything: Your risk is very low. Check the URL you saw — if it wasn't the official venue or ticketing platform's domain, report the code to venue staff. Monitor your accounts as a precaution.

If you entered card or payment details:

1. Call your bank or card issuer immediately using the number on the back of your card. Report the transaction as fraudulent, request a chargeback, and ask for a replacement card number. Do not wait for the charge to post.
2. If you paid via Venmo, Zelle, or Cash App, report the fraud to those services as quickly as possible. Peer-to-peer transfers are harder to reverse, but early reporting maximizes your chances and creates a record.
3. File a report with the FTC at reportfraud.ftc.gov. Include any screenshots, transaction IDs, or seller contact information you have.
4. Report the fake listing or post to the platform where you found it (Facebook, Instagram, Craigslist, etc.) so it can be removed before others are defrauded.

If you entered your Ticketmaster, AXS, or Live Nation login credentials:

1. Go directly to the ticketing platform's website and change your password immediately.
2. Enable two-factor authentication if it isn't already active.
3. Review your account for any tickets purchased or payment methods added that you don't recognize.
4. If you use the same password elsewhere, change those accounts too.

For more detail on what happens when you scan a fraudulent code, see what happens if you scan a fake QR code. For the broader music festival context, see QR code scams at music festivals and concerts.

Frequently asked questions