QR Code Phishing ("Quishing")
That sticker on the parking meter could be stealing your data
Scammers place fake QR code stickers over legitimate ones on parking meters, restaurant menus, package delivery notices, and bus stops. When you scan the code, it takes you to a phishing site designed to look like the real thing.
What to Watch For
- QR code sticker looks newer or placed on top of an older code
- Scanning takes you to a URL that doesn't match the expected company
- The site asks for login credentials, payment info, or personal data
- No way to verify who placed the sticker or when
Examples
""A sticker on your office building's parking pay kiosk reads: 'New system! Scan to pay parking.' Scanning opens a page that looks like the real parking portal but has a slightly different URL.""
Why it works: People scan QR codes without checking the destination URL. The parking pay context makes the request feel routine and safe.
What to Do
Before entering any information, check the URL that the QR code opens. Does it match the company's official website? When in doubt, type the address manually instead of scanning. Never enter passwords or payment info on a site reached via a QR code.