The Federal Trade Commission has issued a new warning after reports that scammers are covering real parking meter QR codes with fake ones of their own. The meter is real, the parking space is real, and the need to pay is real — but the link underneath that sticker can belong to a criminal.
Parking Meter QR Code Scam: FTC Warns Drivers to Check Before Paying
Parking Meter QR Code Scam: What the FTC Wants Drivers to Check Before Paying
Before you scan the next QR code on a parking meter, it’s worth taking one extra look. The FTC says scammers are placing fake “scan to pay” stickers directly over legitimate parking codes, sending drivers to fake payment pages instead of the real one.
This is not just about losing a few dollars for parking. A fake payment page can collect your card number, bank information, password, or other personal details — and in one recent case, police say a driver had $2,000 withdrawn after scanning a fraudulent parking code.
Why the Scam Works
This trick works because nothing about the first step feels strange. You’re standing beside a meter, probably watching the time and trying to avoid a ticket. You see a sticker that says “scan to pay.” Your phone opens what looks like a parking page, and you enter a card number.
The scammer hasn’t asked you to do anything unusual. They’ve quietly changed the destination of an ordinary payment — like someone placing a new address label over the address on a payment envelope. Your money is real and your intention is correct, but the destination has been switched.
A QR code makes this easy because the web address is hidden inside the pattern. Your phone may preview the destination, but you have to pause long enough to actually read it before tapping through.
Real Cases Across Multiple Cities
That pause mattered in New Westminster, British Columbia. On August 12, 2026, police warned that fraudulent stickers marked “scan to pay” had been attached to parking meters around the city. Numerous people called after scanning the codes and later finding large withdrawals from their accounts. Police said one victim lost $2,000, and the city confirmed it does not use QR codes to collect parking payments at all.
This scam isn’t new, either — it just keeps returning. The FTC first warned in December 2023 that scammers were covering parking meter QR codes with their own. New York City issued its own alert in June 2025 after a fraudulent sticker on a ParkNYC meter directed people to a third-party payment page. In February 2026, Asheville, North Carolina found roughly 20 fraudulent stickers on city meters.
Those city examples also reveal why one simple rule doesn’t work everywhere. New York City says metered parking should be paid through the official ParkNYC app or at a physical meter. Asheville says it doesn’t use QR codes on its meters at all, directing drivers instead to the meter or its designated Flowbird options. Other parking operators may legitimately use QR codes. So the safest advice isn’t that every code is fake — it’s that the payment method should be verified independently.
The Fake Charge May Only Be the Beginning
Here’s the surprising part: the amount shown on the parking screen doesn’t define how much money is actually at risk. Imagine you expect a $5 charge. The page accepts your card, and you walk away thinking the meter is paid. The city may never receive that $5, so you could still end up with a parking ticket.
Meanwhile, whoever is behind the page may try a larger charge, enroll your card in a recurring service, or use your information somewhere else entirely. The Better Business Bureau described one report where a person thought a parking QR code led to a parking app — instead, their information was used for an unrelated digital membership charge of $39.99. That example and the New Westminster loss show the same basic problem: the number on the parking screen doesn’t define how much money is at risk.
How the Scam Actually Works, Step by Step
A real parking meter gets covered by a fake QR sticker. Scanning it opens what looks like a legitimate payment page. Entering your information there puts your money or your data at risk — before you’ve paid the meter at all.
How to Check Before You Pay
Start with the physical code. Does it look like a sticker placed over another label? Are the edges peeling? Does the color or branding look different from the permanent instructions? Tampering is a strong warning sign — but a neat, professional-looking sticker isn’t proof that a code is safe. Scammers can print convincing labels too.
Next, read the link preview before opening the page. The FTC says to look for spelling mistakes or switched letters — a web address can be changed by one character and still look right during a quick glance. Be cautious of shortened links, since they can conceal the final destination. But checking the spelling is only one layer; a convincing domain name and a copied city logo can still lead to a fake site.
A stronger move is to step away from the code entirely and find the official payment channel on your own. Use an official parking app you already installed, type the city or operator’s known website yourself, or use the meter’s card reader or coin slot if it offers one. If you need to install an app, find it through your phone’s recognized app store only after confirming the app name on the city’s official website — comparing the app name, web address, zone number, and accepted payment methods against what’s printed on the permanent sign.
If You’ve Already Scanned a Questionable Code
Simply scanning a code and seeing a page isn’t the same as giving that page your information. If you’re not sure a code is legitimate, stop interacting with it, close it, and don’t contact anyone through that site. What you do next depends on exactly what you entered or downloaded, because the response depends on what the scammer may have actually received.
If you entered a username or password, the FTC says to change that password immediately — anywhere else you reused it, too — and turn on multi-factor authentication when it’s available. If you entered payment information, contact your bank or card issuer using the number on the card or the institution’s official app. Think about blocking the card, replacing it, and disputing any transactions you didn’t authorize.
Review your bank and credit card activity, including small or unfamiliar charges that could be easy to dismiss, and keep watching after the first day — an unauthorized charge may not appear right away. If money left a bank account, tell the institution exactly what happened and when. Save screenshots, the meter location, the web address, transaction records, and any messages, without returning to communicate with the suspected scammer.
You can report suspected fraud at ReportFraud.ftc.gov. You can also alert the city or parking operator so the sticker can be inspected and removed, and contact local law enforcement if money or personal information was stolen. Keeping your phone and apps updated matters too — the FTC says updates can help prevent a malicious link from turning into a broader device compromise.
What This Means for You
The FTC received about 3 million fraud reports for 2025, with reported losses of $15.9 billion. Those numbers cover all kinds of fraud, not just parking QR codes, and there’s no reliable national loss total for this particular scheme. That limitation matters — the reason to be careful isn’t an inflated claim about how many drivers have been harmed. It’s the clear evidence that this tactic keeps appearing, city after city, and can turn a routine payment into a much larger loss.
Frequently Asked Questions
Are all parking meter QR codes scams?
No. Many parking operators legitimately use QR codes for payment. The problem is that scammers can place a fake sticker over a real one, so a code that looks official isn’t automatically safe. The safest approach is to verify the payment method independently rather than assuming every code is fine — or every code is fake.
How can I tell if a parking QR code sticker is fake?
Look for signs of tampering, like a sticker placed over another label, peeling edges, or branding that doesn’t match the meter’s permanent instructions. But a neat, professional-looking sticker isn’t proof it’s real — scammers can print convincing labels too, so checking the link itself still matters.
What should I do instead of scanning the sticker?
Use an official parking app you already have installed, type the city or operator’s known website into your browser yourself, or use the meter’s card reader or coins if it offers them. If you need a new app, find it through your phone’s app store only after confirming the app’s name on the city’s official website.
What should I do if I already entered my card information?
Contact your bank or card issuer right away using the number on your card or the institution’s official app. Consider blocking or replacing the card, and dispute any transactions you didn’t authorize. Keep checking your statement over the following days, since an unauthorized charge may not show up immediately.
Where do I report a fake parking QR code?
You can report suspected fraud at ReportFraud.ftc.gov. It’s also worth alerting the city or parking operator directly so the sticker can be inspected and removed, and contacting local law enforcement if money or personal information was stolen.
Key Takeaway
Treat a QR code at a parking meter the same way you’d treat a link in an unexpected email: check where it leads, and whenever possible, reach the payment service independently rather than through the code itself. Convenience only saves you a minute when the destination is genuine.
Money Instructor provides educational information only and does not offer tax, legal, investment, or financial advice. Information may change or may not apply to your situation. Please verify details with official sources and consult a qualified professional before making financial decisions.
