Robinhood QR Code Scam: What It Is and What to Do

The three Robinhood QR code scams targeting investors

Robinhood has become one of the most impersonated investment platforms in QR code fraud. Young and first-time investors are the primary target — scammers know that newer investors are less familiar with how legitimate brokerage communications work, and more excited by offers of free stocks or referral bonuses.

The most important fact to know upfront: Robinhood does not use QR codes in any legitimate flow — not for account verification, not for promotions, not for support. If a QR code claims to be from Robinhood, it is not.

1. Fake "free stock" QR codes on social media and campus flyers

Scammers print flyers that look like Robinhood referral promotions and post them on college campus bulletin boards, in Discord servers, and as Instagram or Reddit ads. The flyer shows a QR code with language like "Get a free stock — scan to claim" or "Robinhood is giving away shares to new users." When you scan the code, it takes you to a convincing replica of the Robinhood login page. You enter your email and password, and the attacker now has your credentials. Your account — and any linked bank account — is at risk.

Robinhood's legitimate referral program operates exclusively inside the Robinhood app. It generates a personal referral link — not a QR code — and the person you refer must sign up and fund an account before any stock is awarded. There are no external QR codes involved at any step.

2. "Verify your account" QR codes via email or text

You receive an email or text that looks like it is from Robinhood Support. The message says your account has been flagged for unusual activity, your identity needs to be re-confirmed, or your account will be restricted. It asks you to scan a QR code to complete verification. The code leads to a phishing page that harvests your login credentials — and sometimes a copy of your ID if the page asks for identity verification documents.

Robinhood never contacts customers with a QR code to manage or verify an account. All legitimate account actions happen inside the Robinhood app or at robinhood.com. If you receive this type of message, report it to Robinhood at support@robinhood.com and delete it.

3. Crypto deposit QR codes on fake Robinhood Crypto pages

This variant targets investors interested in Robinhood's cryptocurrency offering. A fake website — styled to look like Robinhood Crypto — presents a QR code and asks you to send a small amount of Bitcoin or another cryptocurrency as a "test transaction" to activate your account, claim a bonus, or unlock a higher trading limit. The funds go directly to the scammer's wallet. As with all crypto QR code scams, there is no mechanism to reverse the transfer once it is sent.

Robinhood does not require any deposit confirmation via external QR code. Funding your account is done entirely through the app via bank transfer, debit card, or wire — never by sending cryptocurrency to a wallet address shown on an external website.

Why first-time investors are the primary target

Robinhood popularized commission-free investing and attracted millions of first-time investors, many of them college students and young adults. Scammers specifically target this group because newer investors are:

• Less familiar with how legitimate brokerage communications work, and more likely to accept a QR code as a normal part of the process
• Excited by the prospect of free stocks, which Robinhood's real referral program genuinely offers — making the fake version more believable
• More likely to use the app on a smartphone, where it can be harder to spot a fake domain in a mobile browser before entering credentials
• Less likely to have two-factor authentication enabled, making stolen credentials immediately useful to an attacker

If you have a Robinhood account and have not yet enabled two-factor authentication, do it now — before reading another line.

What to do if you scanned a fake Robinhood QR code

If you only scanned the code but did not enter any information, you are likely fine — but run the URL through QRsafer to confirm and avoid visiting it again.

If you entered your Robinhood login credentials or any personal information, act immediately in this order:

1. Change your Robinhood password immediately. Open the official Robinhood app, go to Account → Security → Change Password. Also change your PIN.
2. Enable two-factor authentication. In the app, go to Account → Security → Two-Factor Authentication. Use an authenticator app rather than SMS if possible.
3. Check your linked bank account. Look for any unauthorized Robinhood withdrawals or transfers. If you see any, call your bank immediately and ask them to block further transfers pending investigation.
4. Contact Robinhood Support. Report the incident through the app's Help menu or at support@robinhood.com. Ask them to place a temporary hold on your account while you secure it.
5. Report to the FTC. File a complaint at reportfraud.ftc.gov. Investment fraud involving securities platforms can also be reported to the SEC at sec.gov/tcr.
6. If you sent cryptocurrency, report the wallet address to the FBI's IC3 at ic3.gov and to the platform you used to send the funds. Crypto transfers are irreversible, but reporting helps investigators track scam wallets. See also the Bitcoin QR code scam guide for additional steps.
7. Document everything. Screenshot the QR code, the phishing page, any messages from the scammer, and your Robinhood account activity. You will need this for your bank and for law enforcement.

How to spot a fake Robinhood QR code before you scan

The simplest rule: Robinhood does not send QR codes. Not in emails. Not in texts. Not on flyers. If a QR code claims to be from Robinhood, it is a scam, full stop.

• Check where the code leads before you interact with it. Scan it with QRsafer first. If the destination URL is anything other than robinhood.com, do not open it.
• Robinhood referrals happen inside the app. If someone tells you to scan a QR code to get free stocks, that is not how Robinhood's referral program works — open the app and check the Invite Friends section directly.
• Ignore urgency. Messages warning that your account will be restricted or closed unless you scan a code immediately are a classic phishing tactic. Robinhood handles account issues through in-app notifications and email — never through external QR codes with countdown pressure.
• Crypto deposits never require a QR code scan on an external site. If any page claims to be Robinhood and asks you to send cryptocurrency to a wallet address, leave immediately.

Frequently asked questions