Uber QR Code Scam: What It Is and What to Do

The three Uber QR code scams

1. The in-vehicle sticker scam

Scammers place sticker QR codes on seat backs, sun visors, or door panels inside rideshare vehicles — sometimes real, sometimes fake. The sticker often reads "Scan to confirm your ride" or "Scan to pay toll add-on." Scanning opens a convincing but fraudulent page that asks for your card number, email, or Uber login credentials.

The sticker doesn't have to be in a fake Uber — a real driver's car can be tampered with by a previous passenger, or the driver may be complicit. Either way, Uber has no mechanism that asks you to scan a QR code inside the vehicle. The real confirmation flow is entirely within the app before you ever get in.

2. The airport pickup lane impersonation scam

At busy airports, scammers stand in rideshare pickup lanes holding phones or signs displaying a QR code. They claim your "assigned driver" had a vehicle issue and that you need to scan to be reassigned or confirm the new ride. The QR code routes to a phishing page harvesting your Uber credentials or a fake payment portal.

Real Uber driver changes happen entirely inside the app. If your driver changes, you receive a push notification with the new driver's name, photo, and plate. No stranger in a parking lot is part of that process. See our guide to QR code scams at airports for the full picture.

3. Fake Uber promo QR codes on social media

Posts on Instagram, Facebook, and X (Twitter) impersonate Uber's official accounts and promote exclusive discount or free-ride QR codes. Scanning takes you to a lookalike Uber login page that steals your credentials, or to a checkout page selling gift cards that never arrive.

Uber does distribute promo codes, but only inside the official app, via push notification, or through partner email campaigns that link to uber.com — never via a standalone QR code on social media.

Why Uber never requires a QR scan

Uber's entire safety model is built around in-app verification. Before you enter a vehicle, the app shows you the driver's name, photo, license plate, and car make and model. You confirm the match in person before getting in. There is no QR code step — not for confirmation, not for toll payments, not for support.

Any QR code presented in a rideshare context is operating outside Uber's actual system. That's the giveaway.

What to do right now

1. If you entered card details, call your bank or card issuer immediately. Report the information as potentially compromised and request a new card number.
2. If you entered your Uber login, go to uber.com or the Uber app, change your password at once, and log out of all other sessions. Enable two-factor authentication if it isn't already on.
3. Report to Uber. Open the app, go to Account → Help, and report the incident under "I have a safety concern." Uber can flag the driver account and investigate if the vehicle was involved.
4. File an FTC complaint at reportfraud.ftc.gov. This creates a formal record and contributes to fraud pattern analysis.
5. Report to the FBI's IC3 at ic3.gov if you lost money or had significant personal data stolen.
6. Save everything. Screenshot the QR code, any web pages it opened, and all communications. You'll need this for your bank and law enforcement.

How to protect yourself before you scan

• Always verify your ride in the app, not with a QR code. Match the driver's name, photo, plate, and car color before you get in. That's the entire Uber safety check — no QR code is part of it.
• Scan unfamiliar QR codes with QRsafer first. QRsafer checks the destination URL against threat databases before you open it. If the destination isn't an official Uber or Lyft domain, it will flag the risk before you interact.
• Get Uber promos only through the app. Open the app and check the Promotions tab. If a promo isn't there, it isn't real — regardless of how convincing the social media post looks.
• At airports, ignore strangers offering rides. Your assigned driver's information is already in the app. No one outside that system can legitimately intercept your pickup.

Frequently asked questions