Fifth Third Bank QR Code Scam: What It Is and What to Do

You received a QR code claiming to be from Fifth Third Bank — asking you to verify a suspicious charge, claim a reward, or complete a security upgrade. Before you scan, here's exactly how attackers impersonate Fifth Third, what the bank would never actually ask you, and the steps to take if you already scanned.

The four Fifth Third Bank QR code scams you need to know

Fifth Third Bank is a major Midwest and Southeast institution with more than 1,100 branches and 11 million customers across Ohio, Michigan, Indiana, Kentucky, and Florida. Its wide footprint and recognizable "5/3" branding make it a frequent impersonation target in Cincinnati, Columbus, Detroit, Chicago, and Nashville metro areas.

1. Smishing texts impersonating Fifth Third fraud alerts

The most common attack arrives as a text message that looks like a genuine Fifth Third fraud alert — for example, "Fifth Third Bank: A suspicious charge of $312.00 was placed on your account. Scan to verify or dispute." The text includes a QR code. Scanning it takes you to a convincing fake version of the Fifth Third online banking login page. Any credentials you enter go directly to the attacker, who can then access your accounts, change your password, and initiate transfers before you realize what happened.

2. Fake Momentum Checking and Jeanie Network reward mailers

These scams arrive as physical mail printed with Fifth Third's green and white branding. The mailer claims you have a cash bonus waiting on your Momentum Checking account or an unclaimed Jeanie Network reward — all you need to do is scan the enclosed QR code to claim it. The QR code leads to a credential-harvesting page disguised as the Fifth Third rewards or account portal. Because printed mail carries an inherent air of legitimacy, many recipients scan without verifying the destination URL first.

3. QR sticker scams on Fifth Third ATM kiosks

Fifth Third operates thousands of standalone ATM kiosks inside grocery stores and convenience stores — locations with high customer volume but minimal bank staff on-site. Scammers exploit this by affixing QR code stickers to kiosk screens or surrounding signage. The stickers may say "Scan to report an ATM issue" or appear as part of an apparent customer-service prompt. Because these locations are rarely inspected by bank staff, a tampered code can remain in place for days and reach hundreds of victims. These codes typically lead to phishing login pages or phone numbers staffed by fake Fifth Third representatives.

4. Fake "online banking upgrade required" QR codes

Scammers time this attack around real announcements of Fifth Third digital platform changes. When Fifth Third publishes news of an app update, a new feature, or a security enhancement, attackers send emails and texts claiming "Your online banking access will be restricted unless you complete the required digital upgrade — scan the code below to re-enroll." Customers who saw real Fifth Third communications about a recent update are more likely to trust the fake one. The QR code leads to a phishing page that harvests username, password, and sometimes a one-time passcode delivered by text.

What Fifth Third Bank never does with QR codes

Fifth Third uses QR codes legitimately in very limited contexts: in-branch marketing materials and app download promotions that link to 53.com. That's the extent of it.

Fifth Third will never send you an unsolicited QR code to:

  • Verify, dispute, or confirm a suspicious transaction
  • Unlock or unfreeze a frozen account
  • Claim a cash bonus, reward, or Momentum Checking offer
  • Complete a digital platform upgrade or re-enrollment
  • Confirm your identity or re-enter your login credentials

If Fifth Third needs you to take action on a fraud alert, they will direct you to the Fifth Third Mobile Banking app or to 53.com — not to a QR code in a text message or physical mailer. Any unsolicited QR code claiming urgent action on your Fifth Third account is a red flag regardless of how authentic it looks.

What to do right now

Your response depends on what happened after you scanned.

If you scanned but didn't enter any information: Your risk is low. Close the page immediately, don't return to it, and monitor your Fifth Third accounts for the next 48 hours.

If you entered your Fifth Third username, password, or a one-time passcode, act immediately:

  1. Call Fifth Third fraud at 1-800-972-3030. This is Fifth Third's dedicated fraud line, available 24 hours a day. Tell them you believe your credentials were compromised through a phishing QR code and ask them to flag your account and restrict online banking access immediately.
  2. Change your Fifth Third online banking password from a trusted device on a trusted network — not the same device or network used when you scanned. Use the Fifth Third Mobile Banking app or go directly to 53.com.
  3. Enable login alerts in the Fifth Third Mobile Banking app. Go to Settings → Alerts to receive notifications for any login attempt from a new device or location.
  4. Review recent account transactions for any unauthorized transfers, new payees, or bill-pay changes you didn't set up. Report anything unfamiliar to Fifth Third fraud immediately.
  5. File a report with the FTC at reportfraud.ftc.gov and submit a complaint to the CFPB at consumerfinance.gov/complaint.

For a complete recovery guide after any suspicious scan, what to do if you scanned a suspicious QR code walks through each step in order.

How to protect yourself before you scan

Fifth Third QR code scams succeed because the messages look convincing — correct branding, plausible scenarios, and urgent language that discourages pausing to verify. Your best protection is checking the destination URL before your browser loads anything.

  • Use QRsafer to preview the URL first. QRsafer decodes the QR code and checks the destination URL against threat intelligence before anything opens in your browser. A phishing page impersonating Fifth Third will not pass the check.
  • Verify any QR code leads to 53.com. Fifth Third's only legitimate domain is 53.com. Attackers use lookalikes like fifththird-secure.com, 53bank-alerts.net, or momentum-rewards-53.com. Inspect the full URL before entering any credentials.
  • Never log in to Fifth Third through a QR code from a text or email. Even if the message looks genuine, open the Fifth Third Mobile Banking app directly or navigate to 53.com in your browser. This takes ten extra seconds and eliminates the phishing risk entirely.
  • Call Fifth Third to verify unexpected messages. If you receive a text, email, or mailer with a Fifth Third QR code you weren't expecting, call 1-800-972-3030 before scanning. Fifth Third fraud support can confirm in seconds whether the message was legitimate.

Frequently asked questions

Does Fifth Third Bank ever send QR codes?

Fifth Third uses QR codes only in low-risk contexts like in-branch marketing and app download promotions. The bank will never send you an unsolicited QR code to verify a charge, unlock your account, claim a reward, or complete a digital upgrade. Any QR code claiming to require those actions is a scam.

What should I do if I scanned a QR code that looked like it was from Fifth Third Bank?

If you only scanned and didn't enter anything, monitor your accounts for 48 hours. If you entered your credentials or a one-time passcode, call Fifth Third fraud immediately at 1-800-972-3030. Ask them to freeze your online banking access, then change your password from a trusted device and enable login alerts in the Fifth Third Mobile Banking app.

Why do Fifth Third ATM kiosks in grocery stores get targeted by QR code scammers?

Fifth Third's thousands of standalone grocery-store and convenience-store ATM kiosks receive heavy foot traffic but minimal bank-staff supervision, making it easy for scammers to affix QR stickers that go undetected for days. Always inspect any QR code near an ATM for signs of a sticker overlay, and never scan a QR code to access your Fifth Third account — use the app or go directly to 53.com.

Check the URL before Fifth Third asks for your password

QRsafer scans any QR code and shows you whether the destination is safe before your browser opens it. Free on iOS and Android.

Related guides