Fake Parking QR Code Scams: How to Check Before You Pay

QR codes in car parks and other public spaces can be replaced or covered with fraudulent stickers. A quick physical and digital check before entering payment details can prevent a convincing fake page from catching you out.

Use the checks below to slow the situation down, verify the claim through a separate route and avoid giving a suspicious contact more information or control.

Inspect the physical QR code

Look for stickers placed over an original code, unusual labels, poor print quality or signs that the panel has been altered. A legitimate-looking parking sign can still have a malicious QR sticker added later.

Check the destination before paying

After scanning, inspect the website address before entering registration, card or account information. Be cautious of misspellings, unrelated domains or a page that asks for more information than the parking transaction reasonably requires.

Use another payment route if unsure

Use the official parking app, type the operator’s website yourself, use a payment machine or follow a phone number printed as part of the permanent sign if you can verify it. Do not feel obliged to continue with the QR route.

Be alert to follow-up contact

The NCSC notes that QR-related fraud in public spaces can involve social engineering after the scan. Treat unexpected calls claiming to be your bank or parking provider with caution and call back through an independently verified number.

If you entered card details

Contact your bank promptly if you entered card or banking information into a page you now believe was fraudulent. Preserve the URL, screenshots and location of the QR code if it is safe to do so, and report the affected sign to the parking operator or site owner.

Official and primary guidance

Scam techniques, platform features and reporting routes change. These sources were checked when this guide was updated:

• NCSC: QR Codes — what’s the real risk?
• NCSC: phishing scams — how to spot and report them