Scammers stick fake QR codes over parking meters, “package notice” flyers, restaurant menus, and event posters. Your phone camera opens a site that looks almost real — then asks for a card or login. That scam is often called quishing. You don’t need to be technical to slow down and check.

Common places fake QRs show up

Red flags (plain English)

What to do instead of scanning and paying

  1. Pause. Real cities and carriers give you other ways to pay or track.
  2. Decode first with free QRCheckopen QRCheck, use the camera or upload a photo of the code. Decoding is designed to happen on your device.
  3. Read the URL the code contains. If it isn’t a domain you trust, don’t log in or pay.
  4. Check the link with LinkCheck or paste any accompanying text into ScamCheck.
  5. Pay the official way — city parking app you already use, typed website from a bill, or the business’s main site you search for yourself (not the QR landing page).

If you already scanned and typed a card

Share with family

One household rule: no payments through a QR you didn’t expect until someone checks the link. Parents and grandparents are frequent targets for parking and package stickers.

FAQ