SAF NATIONAL AI THREAT CENTER

Fraudulent QR Codes Placed on Parking Meters and Public Equipment

HIGHQR Code Fraud

United States

Published: November 27, 2025

Source: FTC Consumer Alerts

Threat Overview

Scammers are placing fake QR codes on parking meters, gas pumps, and other public payment systems to steal financial information and payment data.

Law enforcement agencies across multiple states have reported a surge in "QR code swapping" scams, where criminals place fraudulent QR code stickers over legitimate payment codes on parking meters, electric vehicle charging stations, gas pumps, and other public payment terminals. When unsuspecting users scan these fake QR codes to make payments, they are redirected to fraudulent websites designed to steal credit card information, banking credentials, and personal data. In some cases, the fake payment pages look identical to the legitimate versions, making detection extremely difficult. Victims have reported unauthorized charges ranging from hundreds to thousands of dollars after scanning compromised QR codes. The scam is particularly effective because QR codes are becoming ubiquitous for contactless payments, and most people do not carefully inspect them before scanning. Municipalities and parking authorities are now warning residents to be cautious when using QR codes for payments. Security experts recommend typing payment URLs directly into browsers when possible, and carefully inspecting QR codes for signs of tampering such as stickers placed over original codes or misaligned printing.

Threat Indicators

•Law enforcement agencies across multiple states have reported a surge in "QR code swapping" scams, where criminals place fraudulent QR code stickers over legitimate payment codes on parking meters, electric vehicle charging stations, gas pumps, and other public payment terminals.
•When unsuspecting users scan these fake QR codes to make payments, they are redirected to fraudulent websites designed to steal credit card information, banking credentials, and personal data.
•In some cases, the fake payment pages look identical to the legitimate versions, making detection extremely difficult.
•Victims have reported unauthorized charges ranging from hundreds to thousands of dollars after scanning compromised QR codes.
•The scam is particularly effective because QR codes are becoming ubiquitous for contactless payments, and most people do not carefully inspect them before scanning.

Recommended Actions

Type payment URLs directly into your browser instead of scanning QR codes
Verify QR codes are official before scanning, especially on parking meters or public equipment
Check for signs of tampering or stickers covering original codes
Use official payment apps or websites for government and utility payments
Contact your bank immediately if you've made payments via suspicious QR codes

SAF Advisory

This briefing is part of the SAF National AI Threat Center public protection initiative. StopAiFraud.com provides these threat briefings to help citizens, businesses, and government agencies stay informed about emerging AI-powered fraud schemes.