9 QR Code Scams and Warning Signs
How quishing, sticker overlays, fake payment pages, login traps, prize surveys, and malicious app downloads work—and how to verify a QR code.
TL;DR
Treat an unexpected QR code like an unexpected link. Preview the destination, verify the domain independently, avoid entering credentials or payment details after a surprise scan, and inspect public stickers for tampering.
QR phishing—often called quishing—works because the destination stays hidden until after the scan. The safest habit is to slow down before the page loads.
9 QR Code Scams and Warning Signs
Parking-meter sticker overlays
A fake payment sticker is placed over the official code to capture card details.
Unexpected package or mail codes
A card claims a delivery problem, gift, refund, or urgent account action.
Fake multifactor login codes
The scan opens a counterfeit sign-in page or authorizes an attacker’s device.
Cryptocurrency payment substitution
A malicious code replaces the intended wallet address or checkout destination.
Restaurant table sticker swaps
A code pasted over a menu or payment code routes diners to a lookalike site.
Invoice and payment redirection
A fraudulent code appears on an altered invoice, email attachment, or payment notice.
Malware and risky app installs
The destination pressures the user to sideload an app, profile, extension, or file.
Fake surveys and prizes
A “winner” page collects personal details, card data, or account credentials.
Romance, investment, and recovery scams
A scammer moves the victim to a QR-based payment, wallet, or support portal.
Warning signs and safer moves
| Warning sign | Why it matters | Safer action |
|---|---|---|
| Urgency or threat | Pressure suppresses verification | Open the official app or site yourself |
| Lookalike domain | Small spelling changes mimic trusted brands | Read the full hostname before continuing |
| Physical sticker damage | The real code may be covered | Use another official payment method |
| Credential or payment request | The scan has moved into a high-risk action | Stop and verify through a known channel |
Relevant QR code generators
Build the formats used in this guide, then test the finished code at its real size.
