Door Hanger QR Code Scam: What It Is and What to Do

Why door hangers are a high-trust attack vector

Physical door hangers feel more credible than spam emails or suspicious texts. Someone drove to your neighborhood, walked to your door, and left something — that level of effort implies legitimacy. Scammers exploit exactly this instinct. A well-printed door hanger with a utility company logo or a carrier's color scheme triggers trust before you've read a single word.

Unlike a quishing email that spam filters might catch, a door hanger lands directly on your door with zero digital gatekeeping. And unlike a tampered QR code on a parking meter or gas pump, a door hanger is entirely fabricated — there is no legitimate code underneath it.

The four most common door hanger QR code scams

1. Fake utility rebate or energy-audit hangers. These are the highest-risk variant. A hanger printed with a gas, electric, or solar company logo claims you qualify for a "government energy rebate" or a "free home energy audit." Scanning the QR code takes you to a form asking for your name, address, utility account number, date of birth, and sometimes your Social Security number or banking details "to process the rebate." No rebate exists. The data goes directly to the scammer.

Real utility rebate programs are administered through your state's energy commission or the utility's official website — they do not solicit you door-to-door with a QR code. If you're curious whether a real rebate applies to you, visit your utility's official site directly by typing the URL yourself.

2. Fake home-service discount hangers. Pest-control, lawn-care, HVAC, and roofing companies are common impersonation targets, especially after storms or in new residential developments. The hanger promises a first-service discount and asks you to "book now" by scanning a QR code. The destination is either a fake booking form that collects your card details upfront, or a dark-pattern subscription-signup page. Some lead to real fly-by-night contractors who take a deposit and disappear.

3. Fake package-pickup notices. A hanger styled to look like a FedEx, UPS, or USPS missed-delivery notice says a package couldn't be delivered and instructs you to scan a QR code to "reschedule" or "confirm your address." The QR code leads to a phishing page mimicking the carrier's website — it may ask for your name, address, and a small "redelivery fee" charged to your card.

Real missed-delivery notices from USPS, UPS, and FedEx include a tracking number you can verify on the carrier's official site. They do not require you to pay a redelivery fee by scanning a QR code. See also: USPS QR code scam.

4. Fake local-business coupon hangers. These are lower-stakes financially but still problematic. A hanger claims to offer a discount at a nearby restaurant, car wash, or retailer and instructs you to scan a QR code to "claim your offer." The destination may be an ad-click farm, a personal-data collection form (your name, email, and phone number sold to spam lists), or a fake storefront that harvests your card details. Even if you don't enter payment info, your contact details can be used for future scam campaigns.

Red flags on a door hanger QR code

• No verifiable physical address or phone number. Legitimate businesses and utilities list a real address and a phone number you can independently look up. If the hanger has only a QR code and a vague company name, that is a red flag.
• Urgency language. "Claim within 24 hours," "limited spots," or "your rebate expires today" are pressure tactics designed to prevent you from verifying the offer before acting.
• The QR code URL doesn't match the claimed brand. Use QRsafer to preview the destination URL before tapping. If the hanger says it's from Con Edison but the QR resolves to a generic domain with no utility branding, it is fake. Legitimate hangers from real companies link directly to their official domain.
• The QR code is the only way to respond. Real businesses include a phone number, a website URL you can type yourself, or an in-person option. A hanger with nothing but a QR code removes your ability to verify through any other channel.
• No one in your area has heard of the company. Search the business name online and ask your neighbors. Scammers often blanket an entire neighborhood; if no neighbor received the same hanger from a company you can independently verify, treat it as fraudulent.

What to do if you received a suspicious door hanger

Before scanning: Search the company name online and cross-reference against the official website, Better Business Bureau listing, and your state's contractor license registry. For utility hangers, call your real utility provider using the number on a previous bill to ask whether they sent a door hanger in your area. Real utilities will know.

If you scanned but didn't submit any information: Close the browser tab, clear your browser history and cache, and report the hanger using the steps below. Your risk is low.

If you scanned and submitted payment details:

1. Call your bank or card issuer immediately to report fraud and request a chargeback. Credit card disputes have strong consumer protection; debit card disputes are time-sensitive — act within hours.
2. If you submitted your SSN or financial account details, place a free fraud alert with Equifax, Experian, and TransUnion and consider a credit freeze at each bureau. File an identity theft report at IdentityTheft.gov.
3. Report to the FTC at reportfraud.ftc.gov. Include a photo of the hanger if you have one.
4. Report to your local postmaster if the hanger impersonated USPS or a delivery carrier. The USPS Postal Inspection Service investigates mail and delivery fraud.
5. Report to your city or county consumer-protection office. Many municipalities track door-to-door scam patterns and can alert other residents.
6. Alert your neighbors. Knock on a few doors or post in your neighborhood app — scammers often cover entire blocks in a single visit.

Frequently asked questions