Is the QR Code at the UPS Store Safe to Scan?
Short answer: yes — QR codes shown on official UPS Store equipment or displayed by a staff member are safe. The danger is unsolicited texts and emails with QR codes that impersonate UPS. Here is how to tell the two apart in seconds.
How the UPS Store actually uses QR codes
There are three situations where you will legitimately encounter a QR code at a UPS Store:
- Amazon returns: Amazon's no-box, no-label return process generates a QR code in your Amazon app or confirmation email. You show it to a UPS Store associate, who scans it on their end-of-counter scanner. You never scan anything yourself — the store does.
- UPS My Choice pickups: When a package is held for you, UPS may send a pickup authorization code via the UPS app or an official UPS email. An associate scans it to release the package.
- In-store kiosks or self-service stations: Some UPS Store locations use QR codes on kiosk screens to link your phone to a printing or notary workflow. These codes are generated on UPS-controlled hardware and are safe.
In every legitimate case, the QR code appears on UPS equipment or in a message whose origin you can independently verify. You are never asked to scan a random QR code before entering the store to prove your identity or pay a fee.
Where the real scam risk lives: fake delivery texts and emails
UPS is one of the most impersonated brands in phishing campaigns. Scammers send texts or emails — often looking nearly identical to a real delivery notification — claiming your package is held, stuck in customs, or requires a small redelivery fee. The message includes a QR code to “fix the issue.”
Scanning that QR code takes you to a fake UPS page designed to harvest your credit card, name, and address. Common red flags in fake messages:
- The text or email arrives without you expecting a delivery
- The sender is not @ups.com — look for addresses like delivery-ups-notice@gmail.com or a short-code text from a number UPS has never used
- The message asks for payment (even a small fee of $1–3) to release or redeliver a package
- The QR code opens a website that asks for card details rather than simply directing you to a UPS tracking page
Legitimate UPS notifications link to UPS.com with your tracking number. They do not require you to scan a QR code and pay a fee before a package is delivered.
Three checks before you scan any UPS-related QR code
1. Are you physically inside a UPS Store?
If a UPS associate is showing you a code on their scanner screen or asking you to display your Amazon return QR, you are in the safe zone — that is normal store procedure. If the QR code arrived via a text or email before you left home, treat it with caution before scanning.
2. Verify unexpected messages on UPS.com or the UPS app
If you receive an unsolicited text or email claiming to be from UPS with a QR code, open a browser and go directly to UPS.com or open the official UPS app. Enter your tracking number there. If there is genuinely an issue with your delivery, it will appear in the app — you will not need the QR code from the message.
3. Check what the QR code does before tapping
Use QRsafer to preview the URL inside any UPS-related QR code before opening it. A legitimate UPS destination will resolve to a UPS.com or Amazon.com domain. If the preview shows an unfamiliar domain, close it and report the message.
What to do if you already scanned a suspicious UPS QR code
- If you only opened the page and closed it without entering anything: you are almost certainly fine. Simply visiting a page does not compromise your device on modern iPhones and Android phones.
- If you entered credit or debit card details: call your card issuer immediately to flag potential fraud and request a new card number. Monitor your statements for unfamiliar charges.
- If you entered your email address and password: change that password now and enable two-factor authentication on the account. If you use the same password elsewhere, change it there too.
- If you are unsure what you entered: treat it as a credential compromise and change your passwords as a precaution. One extra reset is far less disruptive than a hijacked account.
Report suspicious messages impersonating UPS to fraud@ups.com and to the FTC at reportfraud.ftc.gov.
Frequently asked questions
Is the QR code at the UPS Store safe to scan?
Yes. QR codes shown on official UPS Store equipment or by a staff member — such as the Amazon return kiosk scanner or a UPS My Choice pickup confirmation — are safe. The scam risk is fake delivery texts and emails with QR codes that lead to phishing pages. If you are in the store and an associate is directing the process, you are in the safe zone.
How does the UPS Store use QR codes legitimately?
The UPS Store uses QR codes for Amazon no-box returns (you show your Amazon app code; the associate scans it), UPS My Choice pickup authorizations, and occasionally in-store service kiosks. In every case the code originates from Amazon or UPS official systems — not from an unsolicited text or email. You are never asked to pay a fee via a QR code to complete a standard store transaction.
What does a fake UPS QR code scam look like?
Fake UPS messages arrive by text or email claiming your package is on hold or requires a small fee. They include a QR code that opens a convincing UPS-lookalike page asking for payment or login credentials. Real tells: the sender is not @ups.com, there is a fee demand, or the QR code destination is not ups.com. If anything feels off, go directly to UPS.com or the UPS app and look up your tracking number — the real status will be there.
Stop guessing. Know before you scan.
QRsafer checks the destination URL against real-time threat databases the moment you point your camera — giving you a Safe, Risky, or Dangerous verdict before the page even loads. Replace your phone's default scanner and never have to manually inspect a URL again.