Scammers Target Parking Meters with Fake QR Codes to Steal Your Data

The Federal Trade Commission (FTC), the Better Business Bureau (BBB), and various city officials are raising alarms about a growing scam involving fake Quick Response (QR) codes placed on parking meters. These deceptive codes can lead users to fraudulent websites that steal personal and financial information.

As cities enhance parking convenience through QR codes for digital payments, malicious actors are exploiting this technology. Scammers are reportedly covering legitimate QR codes with stickers that direct unsuspecting users to counterfeit sites. Such was the experience for one Reddit user who reported unauthorized charges after scanning a fraudulent code at a parking meter.

ParkMobile, a widely used parking application, has acknowledged the issue. A spokesperson emphasized the need for users to remain cautious when inputting payment details. “Scammers have been known to create fake QR codes that will mislead users into entering their credit card information,” the spokesperson warned.

The BBB has documented numerous complaints regarding these scams. One victim recounted entering credit information on what they believed was a parking app, only to discover it was a subscription service, resulting in an unauthorized $39.99 charge.

This type of fraud isn’t new. The FTC previously cautioned the public about QR code scams, highlighting incidents where real codes were obscured by fake ones at parking meters. Reports of such scams have emerged from several cities, including warnings issued in April by the Honolulu Department of Transportation. They cited incidents of fake stickers placed over legitimate QR codes, leading to phishing sites.

In early 2024, the Baltimore City Parking Authority also alerted drivers about similar activities. They committed to removing any fraudulent stickers and encouraged direct payments through meters. More reports surfaced in August from Redondo Beach, California, detailing fake QR codes misdirecting users to misspelled sites.

To safeguard against such scams, agencies recommend several strategies:

• Pay directly at the meter using cash or a credit card.
• Utilize established payment apps like ParkMobile instead of scanning QR codes.
• Inspect websites for irregularities, including misspellings or error-ridden content.
• Be cautious with QR codes leading to shortened URLs, which can conceal malicious sites.
• Ensure QR codes appear part of the original meter and are not mere stickers.
• Consider using QR scanners that offer additional security features against phishing attempts.

These measures can help protect users from falling victim to scams at parking meters and beyond.