DoorDash QR Code Scam: What It Is and What to Do

The three DoorDash QR code scams

1. Fake DoorDash support account verification

You receive a text or email claiming your DoorDash account has been flagged, suspended, or accessed from an unfamiliar device. The message says you must scan a QR code to "verify your identity" or "restore access." Scanning opens a convincing DoorDash login lookalike that captures your email, password, and sometimes payment details.

Real DoorDash account issues are resolved through the app or at doordash.com/help — never by scanning a QR code someone sent you. If you receive one of these messages, go directly to the official site and log in there rather than through any link or QR code.

2. Dasher equipment and bag-fee scam

This variant targets Dashers (delivery drivers). A fake "DoorDash onboarding" or "DoorDash equipment" message is sent to new or prospective Dashers, asking them to scan a QR code to pay for an insulated bag or activation kit before they can start earning. The QR code routes to a fake payment page that harvests card details — DoorDash never charges Dashers fees to get started.

Dashers sign up exclusively through the official DoorDash Dasher app and doordash.com. Any message asking for an upfront payment via QR code is fraudulent. See our guide to job offer QR code scams for the broader pattern.

3. Fake promotional discount QR codes

Posts on social media platforms impersonate DoorDash's official accounts and promise free credits, BOGO deals, or exclusive discount codes accessed via QR code. Scanning leads to a phishing DoorDash login page that steals credentials, or a checkout page for fake gift cards that never arrive.

DoorDash does run promotions, but these are always delivered inside the app under the "Promos" tab, through verified email campaigns linking to doordash.com, or via partner codes entered at checkout — never through a QR code shared on social media.

Why DoorDash never uses QR codes this way

DoorDash's delivery confirmation, payment, and support systems operate entirely within the app. Orders are confirmed by matching the driver's name and photo. Payments are processed before the driver arrives. Customer support tickets are filed through the app or doordash.com/help.

There is no step in any legitimate DoorDash flow that requires you to scan a QR code sent by another person. That's the red flag — legitimate platforms keep sensitive interactions inside their own authenticated interfaces.

What to do right now

1. If you entered your DoorDash login, go to doordash.com immediately, change your password, and log out of all active sessions. Enable two-factor authentication under Account Settings.
2. If you entered card or bank details, call your card issuer right away and report the information as compromised. Request a new card number.
3. Report to DoorDash. Open the DoorDash app, go to Help, and report the incident. If a Dasher was involved, include the order details so DoorDash can investigate the account.
4. File an FTC complaint at reportfraud.ftc.gov. This creates a formal record and feeds into fraud pattern analysis that helps protect others.
5. Report to the FBI's IC3 at ic3.gov if you lost money or significant personal data was exposed.
6. Save evidence. Screenshot the QR code, any pages it opened, and all messages you received. You will need these for your bank and any law enforcement report.

How to protect yourself

• Manage your DoorDash account only inside the app or at doordash.com. Never follow a QR code or link from a text or social media post to log in.
• Scan unfamiliar QR codes with QRsafer first. QRsafer previews the destination URL against threat databases before you open it. If it doesn't resolve to an official doordash.com domain, it will flag the risk.
• Find promos inside the app. Open DoorDash and check the Promos tab. If a deal isn't there, it isn't real.
• Enable two-factor authentication. Even if a scammer obtains your password, 2FA prevents them from logging in without access to your phone.

Frequently asked questions