Huntington Bank QR Code Scam: What It Is and What to Do
Scammers impersonate Huntington National Bank using QR codes in fake fraud-alert texts, reward mailers, and ATM sticker overlays — targeting customers across Ohio, Michigan, Indiana, and the broader Midwest. Here's how each variant works, what Huntington will never ask you to scan, and the exact steps to take if you already provided information.
How Huntington Bank QR code scams work
Huntington Bancshares operates more than 1,000 branches concentrated in Ohio, Michigan, Illinois, Indiana, Pennsylvania, and Kentucky. Its dominant regional footprint — and the high trust customers place in it — makes Huntington one of the most-impersonated Midwest bank brands in QR code phishing campaigns.
Smishing texts impersonating Huntington fraud alerts. You receive a text message that looks like a Huntington security alert: “HUNTINGTON ALERT: A suspicious transaction of $XXX was attempted on your account. Scan the QR code below to verify your identity and prevent a hold.” These texts are especially common in Columbus, Cleveland, Detroit, and Indianapolis — cities where Huntington's branch density makes the message feel immediately credible. The QR code leads to a convincing fake Huntington login page that harvests your username, password, and sometimes your one-time verification code.
Fake “Huntington Perks Checking” reward QR codes. A mailer or email arrives offering a cash bonus for “existing Huntington Perks Checking customers.” A QR code directs you to “claim your $200 reward” or “confirm your enrollment.” Because Huntington does offer real cash-bonus promotions for its checking products, these messages have an authentic feel. The page behind the QR code collects your account number, debit card details, or online banking credentials.
QR sticker scams on Huntington ATMs. A fraudulent QR code sticker is placed over or beside the real QR code on a standalone Huntington ATM — most often at grocery store or convenience store kiosks rather than branch-located machines, where foot traffic is high and supervision is low. Scanning the sticker takes you to a fake Huntington login page or card-capture portal instead of the legitimate Huntington site. Always inspect any ATM QR code for raised edges or misaligned printing before scanning.
Fake “Huntington digital banking upgrade” QR codes. After Huntington publicizes a system change — a new mobile app version, a platform migration, or an online banking update — scammers quickly send emails or texts referencing the real announcement and including a QR code to “complete your account upgrade.” The urgency framing (“you must upgrade by [date] to avoid losing access”) pushes recipients to act without verifying the source.
All four variants exploit QR code opacity — the destination URL is invisible until after the scan — as part of the broader pattern of bank QR code scams that have surged since 2022.
What Huntington Bank will never ask you to do via QR code
Huntington manages all banking and fraud-response activity through huntington.com and the Huntington Mobile app. No legitimate Huntington communication will ever ask you to do any of the following through a QR code in an unsolicited message:
- Verify your identity or respond to a fraud alert by scanning a QR code in a text or email
- Log in to online banking through a QR code sent outside the official Huntington Mobile app
- Claim a Perks Checking reward or cash bonus by scanning a QR code in an unsolicited mailer
- Complete a digital banking upgrade by scanning a QR code from an email or text
- Enter your debit card number, PIN, or SSN through a QR code link
If you receive any of these requests, treat it as a scam regardless of how authentic the Huntington branding appears. Always verify by calling Huntington directly at 1-800-480-2265 or by logging in at huntington.com from a bookmark you control.
What to do right now
Your response depends on what you did after scanning.
If you only scanned and didn't enter anything: Your risk is low. Close the page and don't return to it. Monitor your Huntington account for unfamiliar transactions over the next 48 hours.
If you entered your online banking username or password:
- Call Huntington fraud immediately at 1-800-480-2265. They can place a hold on suspicious activity and flag your account before a scammer uses the credentials.
- Change your Huntington online banking password from a device you trust — not the one you used to scan the QR code — and choose a password you haven't used elsewhere.
- Enable Huntington account alerts in the Huntington Mobile app so any new login or transaction triggers an immediate notification.
- Review recent account activity in your Huntington app and dispute any transactions you don't recognize.
If you entered your debit card number or PIN: Call the Huntington fraud line at 1-800-480-2265 and request that your debit card be cancelled and reissued immediately. A new card with a different number renders the stolen details useless.
If you entered your SSN or date of birth:
- Place a fraud alert with all three credit bureaus (Equifax, Experian, TransUnion). A single call to one bureau alerts all three, making it harder for scammers to open accounts in your name.
- Consider a credit freeze — stronger than a fraud alert, it blocks new credit entirely. It is free and reversible at all three bureaus.
- File a report with the FTC at reportfraud.ftc.gov for an official record and a personalized recovery plan.
Frequently asked questions
Does Huntington Bank send QR codes for fraud alerts or account verification?
No. Huntington does not send unsolicited QR codes to verify your identity, respond to a fraud alert, or confirm a suspicious transaction. All legitimate Huntington fraud response happens at huntington.com or through the Huntington Mobile app. Any unsolicited QR code claiming to be from Huntington for security or verification purposes is a scam.
What do Huntington Bank QR code scams look like?
The four most common variants are smishing texts impersonating Huntington fraud alerts (scan to “verify a suspicious transaction”), fake Huntington Perks Checking reward mailers promising cash bonuses, QR sticker overlays on standalone Huntington ATMs at grocery and convenience stores, and fake “digital banking upgrade” QR codes sent after real Huntington system announcements. All four are designed to look like routine bank communications.
What should I do if I scanned a fake Huntington Bank QR code?
If you only scanned and entered nothing, monitor your accounts for 48 hours. If you entered banking credentials, call Huntington fraud at 1-800-480-2265 immediately, then change your password and enable account alerts. If you entered debit card details, request a new card. If you shared your SSN, place a fraud alert with all three credit bureaus and consider a credit freeze. Report to the FTC at reportfraud.ftc.gov.
See where a QR code goes before you scan it
QRsafer scans any QR code and shows you whether the destination is safe before your browser opens it. Free on iOS and Android.