payment scams Archives - The Free Financial Advisor

Scan a QR Code to Pay? Check These 3 Things Before Entering Your Card Number — A QR code can lead to a legitimate payment page or a convincing fake, so consumers should inspect the physical code, check the web address, and verify the payment request before entering card information – Shutterstock

A QR code can turn a parking meter, restaurant table, or checkout counter into a payment screen in seconds. That convenience comes with one important catch: the code can send you somewhere you never intended to go, and scammers have gotten creative about making fake payment pages look perfectly ordinary.

The Federal Trade Commission recently warned about scammers placing their own QR codes over legitimate ones on parking meters. A quick scan can lead to a fake website designed to collect payment information or personal details.

Before entering a card number, take a moment to play detective. Three quick checks can help separate a legitimate payment page from one that deserves a very hard pass.

1. Check Where the QR Code Actually Sends You

A QR code itself does not prove anything about the business behind it. Think of it as a shortcut to a destination, and that destination could belong to the real business or someone pretending to be it. After scanning, look at the web address your phone displays before tapping deeper into the page or entering any information. The FTC recommends checking for misspellings, swapped letters, or other signs that a website address does not match the company you expect.

This matters because scammers can build convincing copies of real payment pages, complete with familiar logos and polished designs. A page can look professional and still belong to a stranger. If the address looks odd, overly complicated, or unrelated to the business, close the page and find the company’s official website another way. For a parking payment, for example, check the meter or the parking operator’s known website rather than trusting a suspicious destination simply because the QR code sits nearby.

2. Inspect the QR Code Before You Scan

Give the physical code a quick once-over before pointing a camera at it. Scammers can place stickers over legitimate QR codes, turning an ordinary parking meter or sign into a digital trap without changing the rest of the setup. The FBI specifically warns consumers to look for signs that a physical QR code has been tampered with, including a sticker placed over the original code.

That tiny pause can make a big difference. Look for peeling edges, unusual placement, crooked stickers, mismatched printing, or a code that seems strangely attached to an otherwise official sign. If something looks off, skip the scan and locate the payment service through a trusted source instead. A QR code should make payment easier, not force a scavenger hunt for your card number.

3. Ask Why the Site Needs Your Card Information

Once a QR code opens a payment page, resist the urge to fill in every box simply because the page asks for it. Check the amount, the merchant name, the purpose of the payment, and the information the page requests before entering your card number. A legitimate payment process should make sense for the transaction, while a suspicious page may suddenly ask for unrelated account credentials or other sensitive information.

Pay particular attention when a QR code arrives unexpectedly by text, email, or some other message and pressures you to act immediately. The FTC has warned about QR-code phishing messages that claim a payment problem, account issue, or other urgent situation requires a scan. If the message claims to come from a company you do business with, visit that company’s known website or contact it using a trusted phone number instead of following the QR code’s instructions.

A QR Code Can Be Convenient Without Being Automatically Safe

QR codes themselves are not the villain here. Businesses use them for perfectly legitimate purposes, including menus, event tickets, parking payments, and other everyday transactions. The problem starts when people treat the little black-and-white square as proof that whatever appears after the scan deserves trust.

If a payment page raises doubts, there is no prize for finishing the transaction fastest. Enter the business’s website manually, use its official app, or ask an employee where customers should pay. The FBI has specifically advised consumers to avoid making payments through sites reached from QR codes when they can instead use a known, trusted website.

Already Entered Your Card Number? Act Quickly

A suspicious scan does not automatically mean someone stole your information, but entering card details on a fake payment page deserves immediate attention. Contact the card issuer using the number on the back of the card or through its official app or website, explain what happened, and ask what steps it recommends. The FTC also advises reviewing credit card and bank statements for transactions you do not recognize.

If the suspicious page also collected a username or password, change that password promptly anywhere else you reused it and turn on multifactor authentication when available. If the QR code came through a suspicious message or package, avoid returning to the site or communicating with the sender. The FTC recommends reporting QR-code scams through ReportFraud.ftc.gov, while the FBI accepts reports of suspicious internet activity through its Internet Crime Complaint Center.

Let the QR Code Earn Your Trust

A payment QR code deserves the same scrutiny as a link in an unexpected email. Check the code, inspect the destination, and make sure the payment request actually matches the purchase before handing over card information. Those few seconds can keep a convenient payment from becoming a very inconvenient cleanup job.

The smartest payment screen is not necessarily the prettiest one. If anything about the code, website address, payment amount, or request for information feels wrong, stop and verify the payment through a source you already trust. Would you scan a QR code to pay after spotting one of these warning signs?