Is the QR Code at Costco Safe to Scan? Quick Answer
Short answer: official Costco QR codes are safe. Costco uses QR codes in a handful of legitimate, well-defined places. The real threat is not inside Costco warehouses — it is the flood of fake “win a Costco gift card” QR codes circulating on social media, in text messages, and on printed flyers. Here's how to tell the difference.
Where Costco legitimately uses QR codes
Compared to most large retailers, Costco has a limited number of QR code touchpoints — which actually makes it easier to recognize something unusual:
- Membership card digital display. The Costco app lets members show a digital version of their membership card, sometimes with a barcode or QR code. This is generated inside the official Costco app and linked to your account. You show it; you do not scan an external code.
- Food court ordering. Some Costco locations have piloted QR-code-based ordering at the food court. The destination is always a Costco-owned page — if your phone shows a costco.com URL or opens the official Costco app, you are safe.
- Membership renewal mailers. Costco occasionally includes a QR code in physical renewal notices. These link to costco.com membership pages. A legitimate renewal notice will not use urgent language or threaten immediate cancellation.
- Product and promotional signage. Some in-warehouse signage includes QR codes for product details or seasonal promotions. These link to costco.com product pages and are straightforward.
In every legitimate case, the QR code destination begins with costco.com or opens the official Costco app. If the URL looks different — shortened, hyphenated, or unfamiliar — close it immediately.
The main scam: fake Costco gift card and prize QR codes
Costco's trusted brand and large membership base make it one of the most impersonated retailers in QR code gift card scams. The pattern is consistent: a post, flyer, text, or email claims you have won — or can claim — a free Costco gift card, and asks you to scan a QR code to “verify your entry” or “claim your reward.”
The QR code leads to a convincing but fake page that asks for your name, email, shipping address, and credit card number — ostensibly to cover “shipping and handling.” Once submitted, your information goes straight to the scammer. You never receive a gift card, and you may also face unauthorized charges or identity theft.
This is a variant of the broader gift card QR code scam — one of the most common QR phishing vectors targeting consumers. The Costco name is used because it is widely recognized and associated with value, making victims less suspicious.
Red flags that tell you it's a scam
- You never entered a Costco sweepstakes. Legitimate prize notifications only go to people who opted in. Unsolicited “you won” messages are almost always scams.
- You are asked to pay something to claim a prize. Legitimate giveaways never require payment — not for shipping, not for taxes, not for anything.
- The URL is not costco.com. Scam pages use domains like costco-rewards.com, costco-gift-offer.net, or similar. None of these are official.
- The message came via social media or text. Costco does not run gift card giveaways through unsolicited texts or Facebook posts with QR codes.
What to do if you already scanned and something felt wrong
- Close the page immediately — do not enter any information and do not tap any buttons on the suspicious page.
- If you entered payment details: call your bank or card issuer immediately to report potential fraud and request a replacement card. Federal law limits your liability for unauthorized charges if you report promptly.
- If you entered your Costco.com login: go directly to costco.com and change your password. Review your account for unauthorized orders or membership changes.
- File a report at reportfraud.ftc.gov — include any screenshots of the scam QR code or the page it opened.
- If a physical kiosk or in-store sign showed the code, alert Costco staff immediately so they can check for tampering and protect other members.
Frequently asked questions
Does Costco send QR codes for membership renewal?
Costco does sometimes include QR codes in official renewal mailers that link to costco.com. However, Costco will never send an unsolicited text or email with a QR code demanding immediate payment or threatening to cancel your membership. If you receive one of those, it is a scam. Always verify by logging in to costco.com directly rather than scanning an unexpected QR code.
Is the “win a Costco gift card” QR code real?
No. QR codes promising a free Costco gift card — on social media posts, flyers, texts, or emails — are almost always scams. Costco does not run unsolicited gift card giveaways via QR code. These pages harvest your personal and payment information under the guise of “claiming your prize.” Report them to the FTC at reportfraud.ftc.gov.
What should I do if I scanned a Costco QR code that took me to a suspicious site?
Close the browser immediately without entering any information. If you already entered payment or login details, call your bank to report potential fraud and change your Costco.com account password right away. File a report at reportfraud.ftc.gov. If a physical kiosk or display showed the code, notify Costco staff so they can check for tampering.
Check before you scan — every time
QRsafer previews any QR code destination and flags unsafe links before you ever open them. Free on iOS and Android.