You bought a sealed gift card, loaded it, and it was already drained. Here is how scammers empty cards in the store before you ever pick them up, and what to check before you pay.
The Parking Meter QR Code Scam
That handy QR code on the parking meter might not belong to the city. Here’s how a two-dollar sticker turns into a stolen credit card, and the easy habit that beats it.
Meeke explains this one in a YouTube Short
Perfect for sending to someone who won't read a whole article.
You pull into a spot, you’re running late, and there’s a friendly little QR code on the meter: “Scan to pay.” Two seconds with your phone camera and you’re done. What could go wrong?
Quite a bit, as it turns out. Scammers have been sticking their own QR codes right on top of the real ones, and the FTC put out a warning about it this month.
In plain English
A QR code is just a web address you can’t read. If someone pastes a fake one over the real one, your phone happily takes you to their site instead, and you hand them your card number thinking you paid for parking.
The sticker over the mailbox
Picture the blue mailbox outside the post office. Now imagine someone slaps a very official looking label on it that says “Drop mail here” with an arrow pointing to their box next to it. Your letter goes in, and it never reaches the post office.
That’s exactly what a fake QR sticker does. The meter is real. The parking space is real. The code on it just points somewhere else. And here’s the sneaky part: a QR code is a jumble of black squares. You can’t look at it and tell who it belongs to. You don’t know where it’s taking you until you get there, and even then, the page might not be what it appears to be.
Why the fake page looks so real
The page you land on will have the city’s colors, a parking logo, maybe even a zone number that matches the sign. Copying a website takes a scammer about ten minutes. Then it asks for your card, and sometimes it “fails” and asks you to try again, just to be sure they got it right.
If you do scan one, look at the address bar before you type anything. Read the web address from the right: the name just before the .com or .gov is who really owns the page. “cityparking-pay.info” is not your city.
The easy habit that beats it
- Use the official app you already trust. If your city uses a parking app, open it yourself and type in the zone number from the sign. It’s safer, and it’s faster next time.
- Pay at the meter itself with a card or coins when you can.
- Check the code with your fingers. A sticker that peels, bubbles, or sits slightly crooked on top of another sticker is a big red flag.
- Be suspicious of urgency. A page that says “pay now or be towed in 10 minutes” is using the oldest trick there is. Urgency is the tell.
Side note
This isn’t just a parking thing. Fake QR codes show up on restaurant tables, flyers, and even packages. Treat every QR code like a stranger handing you a sealed envelope: probably fine, but you don’t know what’s inside until you open it.
Too long, didn’t read
- Scammers stick fake QR codes over real ones on parking meters.
- A QR code is a web address you can’t read, so you can’t spot the fake by looking.
- Use the official parking app or pay at the meter instead.
- If you scan one, read the web address before typing your card number.
Get the scam going around this week, every week.
One short email: the scam making the rounds, one tech word made simple, and one tip to keep you and your family safe. Free, no spam, unsubscribe anytime. Plus a free printable "How to Spot a Scam" sheet for your fridge.
We send one email to confirm it's really you. Your address stays with us and our email service, nobody else. Privacy
Keep reading
A call says your power will be shut off tonight unless you pay right now. Real utility companies send written notices first. Here is how to spot the fake before you panic.
A package you never ordered shows up with an Amazon smile and a QR code inside. Scan it and you land on a fake Amazon sign in page. Here's how the trick works and what to do instead.