TSA QR Code Scam: What It Is and What to Do
A QR code claiming to be from TSA can feel urgent because travel already involves identity checks, airport timing, and security rules. Pause before scanning anything that asks for payment, login details, identity verification, or travel-document information.
The safe answer
Do not scan a TSA QR code from an unexpected text, email, PDF, or social message. Open your airline app, type tsa.gov directly, or ask airport staff if you are already in the terminal.
Official airport signs can include useful QR codes, but a QR code is not proof that the request is real. The destination domain, context, and request matter more than the logo around the code.
Common TSA QR scam setups
- PreCheck or enrollment messages: a fake renewal or enrollment notice sends you to a lookalike payment page instead of tsa.gov/precheck.
- Identity verification lures: a QR code says you must verify your ID, passport, Known Traveler Number, or boarding status before a trip.
- Lost-item or airport-fee notices: a message claims TSA found an item or requires a small payment before returning it.
- Sticker swaps near travel counters: a fake code on a poster or flyer points to a payment, login, or data-harvesting page.
The FTC advises travelers to type TSA PreCheck URLs directly and avoid unexpected links or messages that rush payment. That same rule applies to QR codes: type, verify, then act.
What to check in five seconds
- Preview the destination before opening the page.
- Look for a real .gov domain when the message claims to be TSA or another government service.
- Use your airline app or TSA.gov directly instead of a QR code in a message.
- Do not enter SSN, passport, card, or login details after scanning an unexpected code.
Travelers should also review broader airport QR code scam patterns, including Wi-Fi, gate-change, rideshare, and baggage lures.
Frequently asked questions
Does TSA ask travelers to scan QR codes from text messages?
Treat any unexpected TSA text, email, or social message with a QR code as suspicious. For TSA PreCheck, start from tsa.gov/precheck by typing the address yourself. For airport or screening questions, use TSA.gov, your airline app, or airport staff rather than a code in an unsolicited message.
What TSA QR code messages are suspicious?
A message about a screening penalty, identity verification, lost item fee, PreCheck renewal, airport access, or travel document issue is suspicious if it arrives unexpectedly and tells you to scan a QR code, pay quickly, or enter personal information.
What should I do if I scanned a fake TSA QR code?
Close the page. If you entered payment details, contact your card issuer. If you entered identity details, watch for identity theft signs and report the scam to the FTC. If it involved TSA PreCheck, verify your status through the official TSA PreCheck page.
Are QR codes at airports always unsafe?
No. Many airport QR codes are legitimate, especially codes on official signs, airline apps, and staffed counters. The risk rises when the code is a sticker, appears in an unexpected message, uses an unfamiliar domain, or asks for payment or identity information without context.
Check QR codes before you open them
QRsafer previews the destination and checks suspicious links before your browser loads the page.