Fake Prize and Giveaway QR Code Scam: What It Is and What to Do
You scanned a QR code on a flyer, product insert, or social media post promising a prize, gift card, or sweepstakes entry. Now the page is asking for your credit card — or you already entered it and something feels wrong. Here's exactly what's happening and what to do next.
How fake giveaway QR codes work
The setup is simple: a QR code appears somewhere plausible — a flyer in a parking lot, a sticker on a product package, a post shared on social media — with a message like "Scan to claim your $500 gift card" or "You've been selected for a free vacation. Scan to enter." The code leads to a professionally designed page that mimics a real contest or brand promotion.
The page congratulates you and walks you through a few steps. Near the end, it asks for a credit card number to cover "shipping and handling" or a small "processing fee" — usually $1 to $10. That's the trap. By providing your card details, you've handed scammers everything they need to charge your card repeatedly or sell your information to other fraudsters.
Some variants skip the card and go straight for personal information: full name, date of birth, address, phone number, and sometimes the last four digits of your Social Security number, framed as "identity verification to release your winnings." This data is used for identity theft or sold in bulk.
Where these QR codes appear
Physical flyers and stickers are the most common delivery method. Scammers print and distribute them in parking lots, community bulletin boards, apartment lobbies, laundromats, and grocery-store entryways. They're cheap to produce and require no technical skill beyond generating a QR code pointing to a phishing site.
Product package inserts are a growing variant. A counterfeit or third-party product ships with a card inside that says "Register your product for an extended warranty" or "Scan to claim your free gift." The QR code looks like a legitimate manufacturer insert but leads to a fraudulent page.
Social media posts are shared widely because they're free to distribute. A post claiming a brand is giving away prizes for sharing a QR code gets reposted by real people who genuinely believe it's legitimate, spreading the scam far beyond its original reach. The fake brand account looks real, complete with a profile picture and follower count.
The signs a giveaway QR code is fake
- You were never entered in a contest. Winning something you never signed up for is the clearest red flag there is. Real sweepstakes require you to enter — they don't randomly select strangers from a parking lot.
- Paying to claim a prize. Legitimate sweepstakes are free to enter and free to collect. Any page that asks for a card number — even a small one — before releasing a prize is a scam. This is also illegal under FTC regulations for legitimate contests.
- Urgency pressure. "Your prize expires in 10 minutes" or "Only 3 prizes left" are manipulation tactics designed to prevent you from pausing to think. Real brands do not time-limit prize claims this aggressively.
- The URL doesn't match the brand. Before entering anything, look at the address bar. A real promotion from Amazon will be on an amazon.com domain. A random string of characters or a domain like "prize-claim-center.com" is a scam site.
What to do if you entered your information
- If you entered a credit card number: call your bank immediately. Report the transaction as unauthorized and ask for a new card number. Scammers typically charge small recurring amounts that victims don't notice for weeks.
- If you entered personal information (name, address, date of birth, SSN digits): consider placing a fraud alert or credit freeze with Equifax, Experian, and TransUnion. A freeze is free and prevents new credit accounts from being opened in your name.
- Report to the FTC at reportfraud.ftc.gov. Include the URL you were sent to and where you found the QR code. The FTC tracks these scams and pursues enforcement against operators.
- Report to the IC3 at ic3.gov if money was transferred or significant personal data was disclosed.
- Monitor your accounts for unauthorized charges or new accounts you didn't open for at least the next 90 days.
Related scams that use the same mechanics: fake coupon and discount QR code scams and gift card QR code scams follow the same prize-lure playbook and deserve the same skepticism.
Frequently asked questions
How can I tell if a prize or giveaway QR code is a scam?
Three red flags stand out: you were never entered in a contest to begin with; the page asks for a credit card before releasing your prize; and the prize is implausibly large for an unsolicited flyer or social post. Legitimate sweepstakes are always free to collect — any request for payment before you receive a prize is, by definition, a scam.
I entered my credit card on a fake prize page — what do I do now?
Call your bank immediately and report the charge as fraudulent. Ask them to cancel the card and issue a replacement — scammers reuse card details quickly. Monitor your statements for recurring small charges over the next several weeks. File a report with the FTC at reportfraud.ftc.gov and with the IC3 at ic3.gov. If personal information like your SSN or date of birth was also entered, place a credit freeze with all three bureaus.
Can a giveaway QR code install malware on my phone?
Simply visiting the page is unlikely to install malware on an updated phone — the real danger is typing information into the form. However, if the page prompted you to download an app outside the official App Store or Google Play, remove it immediately and run your phone's built-in security scan. Never install an app prompted by a QR code you didn't expect.
See where a QR code goes before you scan it
QRsafer checks the destination URL of any QR code against threat databases and shows you whether it's safe before your browser loads the page. Free on iOS and Android.