QR code scams: how to scan safely
A QR code is just a link you can't read. Scammers stick fake codes over real ones on parking meters and EV chargers, print them on fake parking tickets and put them in emails to get past spam filters. This is sometimes called "quishing". Before you open one, read the address your camera shows. If it isn't the business you expect, don't open it.
What it looks like
Open link: https://parking-payment-portal.top/m/4471
An example in the style of real reports. The link is fake and shown as plain text so it can't be tapped.
See how SafeToHop scores this link →
Signs it's fake
- A sticker on top of another code, or one that looks peeled, misaligned or newer than the sign.
- A QR code in an email asking you to sign in, reset two-step verification or view a document.
- A "parking ticket" or "missed delivery" card that only offers a QR code to pay.
- A web address that doesn't match the business or uses an unusual ending.
- A payment page asking for your full card details when the meter normally uses an app.
What to do
- Read the address your camera shows before opening it, or long-press to copy it and check it in SafeToHop.
- Pay for parking using the official app named on the sign or the machine itself.
- Never scan a QR code from an email to sign in to an account.
- Tell the business or council if you spot a sticker covering their code.
Already tapped it? Follow our step-by-step guide: I clicked a suspicious link. Now what?
Common questions
Can just scanning a QR code hack my phone?
Scanning only shows a link. The risk comes from opening it and then entering details or downloading something. Reading the address first keeps you in control.
How can I check a QR code's link?
Most phone cameras show the address before opening it. Long-press to copy it, then paste it into SafeToHop for a safety score.
Are QR codes on restaurant menus safe?
Usually, but the same rule applies: the address should match the restaurant or a well-known menu or ordering service. Be wary if it asks for card details before you've ordered.
Not sure about a link?
Paste it into SafeToHop. We read the address without opening it.