TaskRabbit QR Code Scam: What to Know and What to Do

You hired a handyman, cleaner, or contractor through a gig platform — TaskRabbit, Angi, Thumbtack, or a similar service — and they asked you to scan a QR code. Maybe it was for payment, a materials deposit, or to "verify your appointment." Here's how these scams work and what to do if you already paid.

The in-person payment QR code swap

The most common variant happens at the end of a job. The tasker or pro pulls out their phone and shows you a QR code, saying it's their "official" TaskRabbit or Angi payment link. In reality, the QR code routes to a personal Venmo, Cash App, or Zelle account — one they control but that has no connection to the platform.

Once you pay through that QR code, the money goes directly to the worker's personal account — bypassing the platform entirely. That means you lose all buyer protections the gig platform provides. If the job was done poorly, if the worker damaged something, or if they simply disappear, you have no official dispute mechanism. Your payment to a personal app is treated as an authorized transfer, not a platform transaction.

Real gig platforms never require you to scan an external QR code to pay a tasker. TaskRabbit charges your card on file automatically after a job. Angi processes payment through its app. If a worker claims the platform's payment system "isn't working" and offers you a QR code instead, that is a red flag — stop, pay nothing via the QR code, and contact the platform's support team.

The upfront materials deposit scam

A second variant strikes before the work begins. A contractor — often someone who responded to a job posting or showed up uninvited after a storm — explains that they need a deposit to buy materials before they can start. They show you a QR code to cover the cost.

Once the deposit is paid via that QR code, many of these contractors disappear. Those who do show up often deliver substandard or incomplete work. Either way, the deposit was paid off-platform and outside any contract — which makes recovery very difficult.

Red flags to watch for: the QR code routes to a personal payment app (not a business payment terminal), the contractor has no physical business address or verifiable license, they pressure you to pay immediately, and there is no written estimate or contract. A legitimate contractor who needs materials funding will typically include that cost in a formal quote — not request an untracked cash transfer before showing their work.

Fake platform "verification" QR codes

A third variant targets homeowners before the job. You receive a text or email — appearing to come from TaskRabbit, Angi, or Thumbtack — asking you to scan a QR code to "verify your service appointment," "confirm your pro's identity," or "update your contact details."

The QR code leads to a fake platform login page that harvests your account credentials. Once the attacker has your login, they can access your stored payment card, cancel legitimate bookings, and impersonate you to contact other users. In some cases the fake page collects payment info directly, claiming a "security hold" is needed to confirm the appointment.

Gig platforms send appointment confirmations by email and in-app notifications — they do not text you unsolicited QR codes to confirm an appointment you already booked. If you receive such a message, go directly to the platform's official app or website to verify your booking, and do not scan the QR code in the message.

What to do right now

If you only scanned and did not enter or pay anything: Your risk is low. Close the page, do not return to it, and monitor your accounts as a precaution.

If you paid via credit or debit card through the QR code:

  1. Call your card issuer immediately using the number on the back of the card. Report the transaction as potentially fraudulent and request a chargeback. The sooner you call, the better your chances of recovery.
  2. Report the worker to the platform — TaskRabbit, Angi, or Thumbtack — through their official support channel. Provide screenshots of the QR code request. The platform can remove the scammer and flag them for other customers.
  3. File a report with the FTC at reportfraud.ftc.gov and with your state attorney general's consumer protection office.

If you paid via a peer-to-peer app (Venmo, Cash App, Zelle):

  1. Contact the payment app's fraud team immediately. Zelle disputes go through your bank. Cash App has a "Report a Problem" flow in the transaction history. Venmo disputes go through their support. Recovery is not guaranteed, but acting quickly matters.
  2. Report the contractor to the gig platform and provide the account name or number the QR code routed to if you have it.
  3. File a police report if the amount is significant — a report number is often required when filing a dispute with financial institutions.

If you entered your platform login credentials on a fake page:

  1. Go directly to the platform's official website or app and change your password immediately.
  2. Enable two-factor authentication on your gig platform account if it isn't already active.
  3. Review your stored payment methods and any upcoming bookings for unauthorized changes.

For more context on contractor-specific QR scams, see home contractor QR code scams. For door-to-door variants of the same scam, see door-to-door QR code scams.

Frequently asked questions

Does TaskRabbit ever ask customers to scan a QR code for payment?

No. TaskRabbit, Angi, Thumbtack, and similar platforms process all payments inside their own apps. No legitimate tasker will ask you to scan a QR code routing to a personal Venmo, Cash App, or Zelle account. If this happens, stop and report the tasker through the platform immediately.

I paid a contractor via QR code off-platform — can I get my money back?

If you paid by credit card, call your issuer immediately and dispute the charge. If you paid via a peer-to-peer app, contact that platform's fraud team — recovery is possible but not guaranteed since these transfers are treated as authorized. In both cases, file a report with the FTC and report the worker to the gig platform.

How do I verify a TaskRabbit or Angi payment request is legitimate?

Legitimate gig platforms charge your card on file automatically or guide you through payment inside their own checkout. You should never need to scan a QR code presented by a worker. If anything about the payment request happens outside the official app, treat it as a scam.

Check any QR code before you scan

QRsafer previews the destination URL of any QR code — giving you a Safe, Risky, or Dangerous verdict before your browser opens it. Free on iOS and Android.

Related guides