Utility Bill QR Code Scam: What's Safe and What's a Scam

QR codes on real utility bills: usually safe, with one exception

Most major utility providers — electric, gas, water, and internet — now print a QR code on their paper bills that links directly to their official online payment portal. If your bill came from your actual utility company and the QR code resolves to that company's official domain, scanning it is generally safe.

The exception is a tampered sticker. In this attack, someone intercepts your mail, places a fraudulent QR code sticker directly over the printed one, and reseals the envelope. The rest of the bill looks completely real — because it is. Only the QR code has been swapped. Before scanning a QR code on any paper bill, run your fingernail across the surface. A printed QR code is flat; a sticker sits slightly above the paper and may have an edge you can feel or see.

Use QRsafer to preview the destination URL before your browser opens it. If the URL matches your utility's official website, you can proceed. If it shows an unfamiliar domain — especially one with a string of random characters or a domain ending other than .com — do not proceed and report the bill to your utility company's fraud line.

The three utility bill QR code scam variants

1. Fake disconnection-threat notices. This is the highest-risk variant and the most common. You receive a notice — by mail, email, or text — claiming your electric, gas, or water service will be cut off within 24 hours unless you pay an overdue balance by scanning a QR code. The notice may look convincingly like your real utility's letterhead, complete with a logo and a fabricated account number.

Here is the critical fact scammers are counting on you not to know: real utility companies are required by state regulators to give customers at least 10 days' advance written notice before disconnecting service. They must also provide a dispute and payment-arrangement process. Any notice threatening same-day or next-day shutoff and demanding QR-code payment is fraudulent — full stop. Call your utility company using the number on a previous paper bill (not any number on the suspicious notice) to verify your actual account status before paying anything.

2. Door-to-door and phone payment solicitations. This variant specifically targets elderly and low-income households. A person visits your home — or calls — claiming to represent your utility company and offering a "discounted" or "deferred" payment option for your outstanding balance. They produce a QR code on a phone, tablet, or printed card and ask you to scan it and enter your card details or bank account number.

Real utility companies do not send collectors door-to-door to collect QR-code payments. If someone arrives at your home claiming this, ask for a government-issued ID and employee number, close the door, and call your utility's customer service line to verify. Do not scan any QR code they present. See also: door hanger QR code scam.

3. Tampered physical bill with a sticker QR code. As described above, this is the most technically sophisticated variant: your real bill arrives in the mail but a fraudulent QR code sticker has been placed over the printed one. The destination URL looks nothing like your utility's official domain. Previewing the URL with QRsafer before scanning is the simplest way to catch this before any harm is done.

Warning signs of a fraudulent utility payment QR code

• Urgency: less than 10 days to pay or service is cut. State regulators require advance notice. A "24-hour shutoff" threat is always a scam.
• Requests payment in gift cards or cryptocurrency. No utility in the United States accepts gift cards or crypto as a legitimate payment method.
• The QR code URL does not match your utility's official domain. Preview the link with QRsafer before tapping. The domain should clearly match your provider's published website (e.g., pge.com, coned.com, xcelenergy.com).
• The notice arrived via text from an unknown number. Your utility company has your phone number on file and will contact you through channels you established when you opened your account. Unsolicited texts about account shutoff are almost always impersonation scams.
• No mention of a dispute process or payment plan. Legitimate shutoff notices include information about how to dispute the balance or arrange a payment plan. A notice with only a QR code and a deadline has omitted this intentionally.
• The QR code sticker is raised above the paper surface. Run your fingernail across the printed area of your bill. A sticker overlay will have a detectable edge.

What to do if you paid via a fraudulent utility bill QR code

First, verify your actual account status. Call your utility company using the number on a previous paper statement — not any number on the suspicious notice. Confirm whether your account is actually overdue. In many cases, your account is current and no payment was needed.

1. Call your bank or card issuer immediately to report the charge as fraudulent and request a chargeback. Credit card disputes are the strongest — you have up to 60 days. Debit card disputes require action within a few business days for full protection. Zelle, Cash App, and cryptocurrency payments are difficult to reverse; report them to the platform and to the FTC regardless.
2. Report to your utility company's fraud line. Most large utilities have a dedicated fraud reporting number on their official website. Your report helps them warn other customers in your area.
3. File a complaint with the FTC at reportfraud.ftc.gov. You can also report to your state's public utilities commission — they track impersonation patterns and can issue consumer alerts.
4. If you submitted your Social Security number or bank account details, place a free fraud alert with Equifax, Experian, and TransUnion. Consider a free credit freeze at each bureau to prevent new accounts from being opened in your name. File an identity theft report at IdentityTheft.gov.
5. If a physical notice was left at your door or delivered by a person, report it to local police and your city's consumer-protection office. Save the notice or photograph it — it is evidence.

Frequently asked questions