Hair Salon and Barbershop QR Code Scam: What It Is and What to Do

Two ways scammers use QR codes at salons and barbershops

Salons and barbershops are common targets for QR code fraud because many stylists accept payment through personal apps like Venmo and Cash App, and because the relaxed, conversational atmosphere of a salon makes clients less likely to scrutinize a QR code before scanning.

Payment QR stickers placed over the real code at checkout. This is the most prevalent physical swap attack in small businesses. A scammer visits the salon, peels the stylist's Venmo or Cash App QR sticker off the counter display or tip card, and replaces it with their own. The code looks identical — same design, same size — but it routes payment to the scammer's account instead of the stylist's. Because the transaction goes through instantly and the receipt shows a name the client doesn't recognize, many victims don't notice until they mention the tip to their stylist and realize the money never arrived. The only reliable defense is confirming the recipient's name on the payment screen before tapping "confirm."

Fake "book now" or loyalty-rewards QR codes on table talkers, mirrors, or door signs. A second vector targets clients who scan a QR code to schedule their next appointment or sign up for a loyalty program. Scammers print convincing promotional cards or door-hanger signs — sometimes impersonating a specific local salon — and post them in waiting areas or near the entrance. The QR code opens a fake booking form that asks for a credit card number to "hold your appointment," or a loyalty sign-up page that collects far more personal data than a real rewards program would need. Real salon booking platforms (Vagaro, StyleSeat, Square Appointments) display the salon's name prominently and do not require a card to browse available times.

How to verify a QR code before paying or booking

For payment QR codes, the single most important check is the name that appears on the payment confirmation screen after you scan. It should match your stylist's name or the salon's business name exactly — not an unfamiliar username or a generic handle. If the name looks wrong, cancel the transaction immediately and ask the staff to point you to the correct account.

For booking and loyalty QR codes, preview the URL before tapping any link. The destination should be a platform you recognize (Vagaro, StyleSeat, Square, or the salon's own domain). A generic link-shortener URL or an unfamiliar domain is a reason to pause. Ask the receptionist for the official website address and navigate to booking from there instead.

If a QR code asks for your card number before you've selected an appointment slot, or requests information that seems excessive for a haircut booking — your date of birth, SSN, or full billing address — treat it as suspicious.

What to do if you sent money to the wrong account or entered card details

If you only scanned the code and did not enter anything: Your risk is low. Close the page and do not return to it.

If you sent a payment to the wrong Venmo or Cash App account:

1. Open the payment app and try to cancel immediately. Venmo and Cash App allow cancellation only while the payment is still pending — once the recipient accepts, it is final. Go to your transaction history, find the payment, and tap "Cancel" if the option is available.
2. Contact the app's support team to report fraud. Even if cancellation isn't available, Venmo and Cash App both have dispute and fraud-reporting processes. Submit a report explaining the fraudulent QR code.
3. Notify the salon. Tell the staff or owner so they can inspect their QR codes and replace any tampered ones. They may be able to identify recent fraudulent activity and alert other clients.
4. File a report at reportfraud.ftc.gov. The FTC uses reports to identify and pursue fraud networks. Include the scammer's payment username if visible.

If you entered a credit or debit card number on a fake booking or loyalty page: Contact your bank or card issuer immediately to report the potential compromise, dispute any unauthorized charges, and request a new card number. Monitor your account for transactions you don't recognize over the following weeks.

The payment-swap tactic used in salon scams is the same technique used in Venmo QR code scams and Cash App QR code scams across many small-business settings. The one-second habit of checking the recipient's name before confirming any QR-based payment is the most effective protection.

Frequently asked questions