Peacock QR Code Scam: What It Is and What to Do

How the Peacock QR code scam works

Scammers run three main variants of this attack:

1. “Account suspended” phishing. You receive a text or email with the Peacock logo claiming your payment method was declined and your account will be deactivated within 24 hours. A QR code directs you to “update your billing info now.” The code leads to a convincing fake Peacock login page that collects your email, password, and credit card number. This scam spikes around major live events — NFL games, Premier League matches, or the Olympics — when Peacock's subscriber base surges and people are especially motivated to keep their access.
2. “Free Premium upgrade” or “Super Fan” offer. A social media ad, broadcast promotion, or text message promises a free upgrade to Peacock Premium Plus — just scan the QR code to “unlock the offer.” The destination requests your Peacock login to “verify your account and apply the upgrade,” harvesting your credentials and any stored payment methods in the process.
3. Device activation scam. You receive a text or email with a QR code claiming your streaming device needs to be “re-activated” or “re-linked” to your Peacock account. Instead of directing you to the real activation page at peacocktv.com/tv, the code leads to a credential-harvesting site that mimics Peacock's interface.

All three variants exploit urgency, brand trust, and the visual authority of a QR code to make the attack feel routine. Embedding a malicious URL in a QR code instead of a typed link bypasses spam filters that flag suspicious addresses — a technique security researchers call quishing.

How Peacock account management and device activation actually work

Knowing the real process makes the fake one easy to spot. Here is how Peacock handles account and device issues legitimately:

• Billing problems — Peacock notifies you through the Peacock app or a verified email from peacocktv.com. You update payment info inside the app or at peacocktv.com/account. Peacock never texts you a QR code to collect payment.
• Plan upgrades — Upgrading your Peacock plan happens inside the app or at peacocktv.com/plans. Peacock does not send unsolicited QR codes offering free Premium or Premium Plus upgrades.
• Device activation — Your TV or streaming device displays an activation code. You visit peacocktv.com/tv on your phone or computer and type the code shown on the TV screen. You do not scan an external QR code from a text or email to activate a device.

If what you received doesn't match one of those three flows, it is a scam.

Red flags to recognize before you scan

• Any QR code in a billing or suspension text or email. Peacock does not use QR codes in texts or emails for account management, payment collection, or fraud alerts.
• Urgency language. Phrases like “your account will be suspended in 24 hours” or “act now to keep streaming” are pressure tactics designed to make you scan before you think.
• A sender address that isn't from peacocktv.com or nbcuni.com. Check the full email address, not just the display name. Scam emails frequently come from addresses like “peacock-support@accounts-update.net.”
• The URL behind the QR code isn't peacocktv.com. Scan the code with QRsafer first — it shows you the destination URL before your browser opens it. If the domain is not peacocktv.com or a recognized NBCUniversal domain, do not proceed.
• A social media ad or text offering a free Premium upgrade. Peacock plan upgrades are available only through the official Peacock app or peacocktv.com — not through QR codes in ads, DMs, or texts.

What to do if you already scanned the QR code

Your next steps depend on what you did after scanning:

1. If you entered your credit or debit card number: Call your bank or card issuer immediately to report potential fraud and request a replacement card number. The sooner you call, the better your chances of stopping unauthorized charges. See I scanned a QR code and it asked for my credit card for a full checklist.
2. If you entered your Peacock email and password: Go directly to peacocktv.com — type it into your browser, do not use any link from the suspicious message — and change your password immediately. Then go to your Account settings and sign out of all devices to terminate any active sessions the attacker may have started.
3. If you reuse that password on other accounts: Change it on every other account, starting with your email and any financial accounts. A stolen Peacock password is most dangerous when it unlocks higher-value accounts that share the same credentials.
4. If you only scanned and looked — but entered nothing: You are most likely fine. Opening the page by itself does not install malware or compromise your account on modern iOS or Android devices. The risk is in what you do after the page loads.
5. Report the scam. Forward the phishing email or screenshot the text message, then file a complaint at reportfraud.ftc.gov. You can also report phishing emails to Peacock's parent company NBCUniversal through peacocktv.com/help.

For the complete step-by-step recovery guide, see what happens if you scan a fake QR code.

Frequently asked questions