Immigration QR Code Scam: What It Is and What to Do

USCIS does not send QR codes

The single most important thing to know: U.S. Citizenship and Immigration Services does not initiate contact via QR codes — ever. USCIS does not send texts, emails, or letters containing QR codes asking you to pay fees, verify your identity, or check your case status. All official USCIS fee payments go through uscis.gov or are submitted by check or money order payable to the U.S. Department of Homeland Security. A QR code directing you to a payment page is not a legitimate USCIS process.

Scammers target immigrants and visa applicants because fear of legal consequences — missed deadlines, denied applications, or deportation — makes people less likely to question an official-looking message. If you are feeling that kind of pressure right now, take a breath: scanning a QR code cannot change your immigration status. It only risks your money and personal data.

The two main variants of the immigration QR code scam

Fake USCIS fee-payment QR codes. These arrive by text, email, or physical mail. The physical variant is the most convincing — it mimics a USCIS notice with official-looking letterhead, a fake receipt or case number, and a QR code to "pay your application fee" or "avoid a processing delay." Scanning opens a fraudulent payment page styled to look like uscis.gov but built to collect your credit or debit card details. Real USCIS payment pages are reached only by navigating directly to uscis.gov — never through a QR code in a letter or text.

Fake attorney and notario QR codes. In this variant, scammers pose as immigration attorneys, legal services firms, or notarios — notary publics who sometimes fraudulently claim immigration expertise. They send QR codes claiming to link to a "secure client portal," a "case status dashboard," or a "document upload system." The destination is a phishing page that collects your name, date of birth, country of origin, passport or A-number, and sometimes upfront "consultation fees." The risk goes beyond financial loss — your immigration documents can be used for identity theft or to file fraudulent applications in your name.

Both variants use the same core tactic found in quishing attacks — embedding a QR code instead of a plain link because QR codes bypass email spam filters and are harder for recipients to inspect before scanning.

What to do if you scanned it

Your response depends on what you did after scanning.

If you only scanned and didn't enter anything: Your risk is low. Close the page and do not return to it. You can report the attempt to the FTC if you wish.

If you entered personal information, payment details, or immigration document numbers, act now:

1. Contact your bank or card issuer immediately. If you entered payment information, call the number on the back of your card, report the fraudulent charge, and request a chargeback and a new card number.
2. Report to the FTC. File a report at reportfraud.ftc.gov. The FTC investigates fraud targeting immigrant communities and uses these reports to pursue scammers.
3. Report to USCIS. Call the USCIS Contact Center at 1-800-375-5283 to report the scam and confirm the status of any pending applications. You can also report fraud online at uscis.gov/report-fraud.
4. Place a fraud alert with the credit bureaus. If you shared your Social Security number, passport number, or other sensitive identifiers, contact Equifax, Experian, or TransUnion — one call places alerts at all three — to make it harder for an attacker to open accounts in your name.
5. Verify your case through official channels only. Check the real status of any USCIS application through the myUSCIS portal at my.uscis.gov, using your official receipt number from paper documents received directly from USCIS.

How to protect yourself going forward

• Never pay USCIS fees via a QR code. Official USCIS fees are paid at pay.gov or by check or money order payable to the U.S. Department of Homeland Security. If any message asks you to scan a QR code to pay, it is a scam.
• Verify attorneys before sharing documents. Confirm that any immigration lawyer is licensed through your state bar association. Notarios are not licensed attorneys in the United States — only accredited representatives and licensed attorneys can legally provide immigration legal advice.
• Scan unknown QR codes with QRsafer first. QRsafer checks the destination URL against threat intelligence databases and shows you whether it is safe before your browser loads anything — protecting you even when a QR code arrives in an official-looking document.

This same pattern — an official-looking message with a QR code demanding immediate action — also appears in IRS QR code scams and Social Security QR code scams. The defense is always the same: never follow a QR code to make a government payment or log in to a sensitive account.

Frequently asked questions