DMV QR Code Scam: What It Is and What to Do

Real DMV offices do not demand payment via QR code

This is the most important thing to know: official state DMV and BMV offices do not send unsolicited texts, emails, or mailers containing QR codes that demand immediate payment for license or registration renewal. Real renewal notices arrive by mail well before your expiration date and direct you to your state's official .gov website or include a pre-addressed payment stub — not a QR code with an urgent deadline.

If a message claims your license will be suspended or your vehicle cannot be driven legally unless you scan a code and pay right now, that urgency is the scam. Scammers exploit the fact that most people know their renewal is coming and are already primed to act on a reminder.

The three variants of the DMV QR code scam

Attackers run this scam through three channels, each targeting a different level of trust.

The mailed-notice lookalike is the most convincing. It arrives as a printed letter that mimics your state's official DMV renewal notice — often including the real state seal, your correct name and address, your actual license plate number or driver's license number (sourced from data brokers), and a fake payment deadline. A QR code on the letter directs you to a phishing page styled to look like your state's DMV website. The page collects your credit card number and sometimes your driver's license number or Social Security number to "verify your identity."

The text-message variant is brief and alarming: "Your license plate [XXX-XXX] registration is past due. Avoid suspension — pay now: [QR code]." The message may spoof a short code or an official-looking sender name. The QR code links to a mobile-optimized phishing payment page. This variant spreads widely because it costs almost nothing to send at scale and catches people off guard when they're on their phones.

The fake third-party DMV-services site is more subtle. These sites present themselves as legitimate "DMV renewal helpers" or "license services" — often found through search ads or social media — and use QR codes in their emails or print ads to funnel you to their payment pages. Some actually process your renewal through the official DMV and pocket a large undisclosed fee. Others are pure fraud: they take your payment and your personal details and never submit anything to the state.

Across all three variants, your driver's license number and Social Security number are the primary targets — the same information that enables identity theft. This is what makes these scams more dangerous than a simple card-skimming page.

What to do if you scanned it

Your response depends on what happened after you scanned.

If you only scanned and didn't enter anything: Your risk is low. Close the page, do not return to it, and verify your actual renewal status by going directly to your state's official DMV website (search your state name + "DMV" and look for the .gov address).

If you entered personal or payment information, act immediately:

1. Contact your bank or card issuer. Call the number on the back of your card and report the charge as unauthorized fraud. Ask them to block the card and issue a replacement. Most issuers have zero-liability policies for fraudulent charges, but you need to report it promptly.
2. Place a fraud alert and freeze your credit if your driver's license number, Social Security number, or date of birth was submitted. A fraud alert is free and alerts lenders to take extra steps before opening new accounts in your name. A credit freeze goes further by blocking new credit entirely. Contact Equifax, Experian, or TransUnion — one call triggers the alert at all three bureaus.
3. Report to the FTC. File a complaint at reportfraud.ftc.gov. If your SSN or driver's license number was exposed, also visit identitytheft.gov for a personalized recovery plan.
4. Report to your state's DMV fraud hotline. Most state DMVs have a dedicated fraud reporting line or online form. Reporting helps them warn other residents and pursue the operators.
5. Verify your actual renewal. Go directly to your state's official DMV website and check whether your license or registration is actually up for renewal — and complete it there if needed, so you don't accidentally let it lapse while dealing with the aftermath of the scam.

How to avoid the scam next time

The safest habit is to bookmark your state's official DMV .gov website and only renew from there. If you receive any renewal notice — by text, email, or mail — containing a QR code demanding urgent payment, treat it as suspicious and go directly to the official site instead.

• Check QR codes with QRsafer before opening them. QRsafer scans the destination URL and shows you a Safe, Risky, or Dangerous verdict before your browser loads anything. A fake DMV payment page will not pass a threat check.
• Know when your renewal is actually due. Your real DMV sends a notice 30–60 days before expiration. If a message arrives outside that window — or earlier than you expect — it is likely a scam.
• Confirm the URL before entering anything. Official state DMV websites use .gov domains. If the page you reached ends in .com, .net, .info, or anything other than your state's .gov address, leave immediately.

This same tactic — impersonating a government agency with an urgent QR code — also appears in IRS QR code scams and Social Security QR code scams. The defense is always the same: never follow a QR code to a payment page for a government agency — go directly to the official .gov website instead.

Frequently asked questions