StubHub QR Code Scam: What It Is and What to Do
You bought a ticket through StubHub — or received a QR code from someone claiming to sell a StubHub ticket — and now you're not sure if it's real. Here's how StubHub QR code scams work, why the secondary ticket market is a top fraud target, and exactly what to do if you were already affected.
Fraudulent listings: QR codes for tickets that don't work
The most common StubHub QR code scam happens when a seller — either on StubHub itself or on an external platform like Craigslist or Facebook Marketplace — delivers a QR code for a ticket that is already used, doesn't match the event, or was obtained without authorization. The code looks legitimate until you reach the gate and it fails to scan.
Scammers exploit StubHub's FanProtect guarantee by listing tickets and collecting payment, counting on buyers to delay reaching out until it's too late to claim a refund quickly. If you reach the gate and the code doesn't scan, the seller may be unreachable and the event long over before the dispute is resolved.
The rule: only accept StubHub ticket transfers through the official StubHub app or a tracked StubHub email. The ticket should appear in your StubHub account — not as an image file, screenshot, or PDF sent outside the platform.
Phishing emails impersonating StubHub
A second attack targets your StubHub account directly. Scammers send emails designed to look exactly like official StubHub communications — matching logo, colors, and layout — with subject lines such as “Your ticket is ready to claim,” “Verify your account,” or “Suspicious activity detected.”
The email contains a QR code. When you scan it, you land on a page styled to match StubHub's login screen. Any credentials you enter go straight to the attacker, who then logs into your real account to access saved payment methods, cancel active purchases for refunds, or resell any tickets you own.
StubHub will never send you an unsolicited QR code by email asking you to verify your account or claim a ticket. Legitimate StubHub ticket delivery is always tied to a purchase confirmation in your account. If you receive a suspicious email, go directly to stubhub.com by typing the address into your browser — never through a link or QR code from the message.
Screenshot tickets sold via social media or DMs
A third variant involves strangers on Instagram, X (Twitter), Reddit, or Discord who claim to have extra tickets and offer to “transfer” them via a QR code image sent as a direct message. The code may look convincing, but there is no way to verify from a screenshot whether the ticket is valid, already scanned, or has been sent to five other buyers simultaneously.
Unlike Ticketmaster's SafeTix rotating barcodes, some StubHub tickets use static QR codes that can technically be screenshot and shared — but sharing the same static code to multiple buyers means only the first person through the gate gets in. Everyone else is turned away with no recourse from the scammer.
Scammers also create fake urgency: “I need to sell fast, the event is tonight — here's the QR code.” The pressure to decide quickly prevents buyers from verifying through official channels. If someone is offering you a ticket outside StubHub and refuses to complete the transaction inside the platform, that is a scam.
What to do if you were scammed
If you scanned a phishing QR code and entered your StubHub credentials:
- Go directly to stubhub.com in your browser and change your password immediately.
- Enable two-factor authentication on your StubHub account if it isn't already active.
- Review your account for unauthorized purchases, saved payment methods added, or tickets listed for resale without your permission.
- If you reuse the same password elsewhere, change those accounts too.
- Contact StubHub customer support to report the phishing attempt and ask them to flag your account for suspicious activity.
If you paid for a ticket and the QR code didn't scan at the gate:
- Contact StubHub Fan Protect immediately — by phone at 1-866-788-2482 or through the app. Document the failed scan with a photo if possible.
- If you paid by credit or debit card, call your card issuer and report the transaction as fraudulent. Request a chargeback.
- If you paid via Venmo, Zelle, or Cash App, report fraud to those services immediately. Peer-to-peer transfers are difficult to reverse but worth disputing.
- File a complaint with the FTC at ReportFraud.ftc.gov and report the seller to the platform where you found the listing.
For related scam patterns, see the Ticketmaster QR code scam guide.
Frequently asked questions
Can StubHub ticket QR codes be faked?
Yes. Scammers deliver QR codes for tickets that are already used, don't match the event, or were sold simultaneously to multiple buyers. Screenshot QR codes shared outside the StubHub app are never safe — only tickets received through the StubHub platform and visible in your verified account are reliable. Use QRsafer to preview any QR code's destination URL before scanning.
I got an email from “StubHub” with a QR code — is it real?
It may be a phishing email. StubHub does not send unsolicited QR codes asking you to verify your account or claim a ticket. If you weren't expecting an email and it contains a QR code, go directly to stubhub.com by typing the address in your browser — do not scan or click anything in the message. If you already did and entered credentials, change your password and enable two-factor authentication immediately.
Someone offered to sell me a StubHub ticket via social media with a QR code screenshot — is that safe?
No. This is a well-documented scam format. The seller may send the same screenshot to multiple buyers, or the code may already be used or invalid. Only accept ticket transfers through the official StubHub app, where the ticket is linked to your verified account and the transaction is documented on both sides.
I got to the gate and my StubHub QR code didn't scan — what should I do?
Call StubHub Fan Protect at 1-866-788-2482 or contact them through the app. If you paid by card, call your card issuer to dispute the charge. If you paid via Venmo, Zelle, or Cash App, report fraud to those services immediately. File a complaint at ReportFraud.ftc.gov and report the seller to the platform where you found the listing.
Check any QR code before you scan
QRsafer previews the destination URL of any QR code — giving you a Safe, Risky, or Dangerous verdict before your browser opens it. Free on iOS and Android.