SPY +0.71%
BND -0.38%
QQQ +1.58%
DIA -0.35%
VNQ -1.14%
GLD -0.72%
BTC +0.76%
AAPL +1.25%
GOOGL +0.68%
NVDA +3.09%
MSFT +1.62%
META -1.51%
AMZN +1.91%
TSLA +5.27%
UBER -1.89%
GS -1.40%
BAC -2.18%
JPM -0.69%
BRK.A +0.19%
COST -0.51%
XOM +1.83%
BABA -1.74%
WMT -2.36%
SPCX +6.62%
DIS -3.23%
F -1.46%
  • Discounts and special offers
  • Subscriber-only articles and interviews
  • Breaking news and trending topics

Already a subscriber?

By signing up, you accept Moneywise's Terms of Use, Subscription Agreement, and Privacy Policy.

Not interested ?

Top Stories
Park and Pay systems using scanned QR codes are vulnerable to scams. Jeffrey Greenberg/Universal Images Group via Getty Images

Scammers are putting fake QR codes on parking meters to steal credit card information. How to protect yourself

Paying for parking is one of those small tasks we don’t give much thought to. You find a spot, look for the payment instructions and, increasingly, pull out your phone to scan a QR code.

However, scammers have figured out a way to take advantage of that routine. Fake QR codes have been placed over legitimate ones on parking meters, sending drivers to websites designed to look like the real payment page.

Advertisement

That’s what police say happened in New York, where drivers were targeted by fake QR codes placed on parking meters. NBC New York reports that investigators arrested suspect Mihai Theodor Enescu in connection with the scheme.

The money news that actually matters.

By signing up, you accept Moneywise Terms of Use, Subscription Agreement, and Privacy Policy.

Enescu has pleaded not guilty. When questioned about the alleged scheme, he denied knowing what police were referring to and said he works for Amazon.

However, the overall issue has caught the attention of the Federal Trade Commission. The FTC warned in September about QR-code scams in public places, including parking areas.

How the parking QR code scam works

The easiest way to avoid this particular scam may also be the least convenient: Don’t blindly trust the QR code sitting on the meter.

In the New York case, police say fake codes were placed on parking meters and directed drivers to websites that appeared to be legitimate payment pages. A driver could scan the code, enter the requested information, and continue on without realizing the code had been replaced.

So, look closely at the code and the area around it. Does it look like it was stuck on top of another code? Is there a sticker that’s peeling, crooked, or covering information that should be visible? If something looks off, don’t scan it.

You can also check whether the parking operator has an official app or website and enter the information yourself rather than following an unfamiliar QR code.

If you do scan, pay attention to the website address before entering your credit card number. The FTC recommends looking for misspellings, swapped letters, or other signs that the URL isn’t the legitimate site you expected.

And don’t assume a website is legitimate just because it looks professional. A fake payment page can look a lot like the real one.

Must Read

What to do if you’ve already scanned the code

If you’ve already scanned a suspicious QR code and entered your credit card information, call the card issuer and let them know what happened. They can tell you whether the card needs to be cancelled and replaced. If it was a debit card, call your bank.

Advertisement

Take a look through the account, too. You may not see a fraudulent charge right away, so keep an eye on it for a while and report anything you don’t recognize.

If you entered a password on the site, change it. And if you’ve used that same password elsewhere, change it on those accounts as well. Go to the company’s website or app yourself rather than returning through the QR code.

There may be other information to think about, depending on what the site asked for. An email address or phone number, for example, could lead to more scam messages later. Be wary of anything that suddenly asks you to confirm information, make another payment or click a link.

A download is another matter, so if the QR code prompts you to install an app or download a file, update your device and run its security software. The FBI also recommends changing passwords for accounts that may have been exposed.

It’s worth reporting the QR code to local authorities, too. The parking operator or local authorities may be able to remove it before someone else scans it.

You May Also Like

Share this:
Laura Grande Contributor

Laura Grande is a freelance contributor with nearly 15 years of industry experience. Throughout her career she's written about and edited a range of topics, from personal finance and politics to health and pop culture.

more from Laura Grande

Explore the latest

Disclaimer

The content provided on Moneywise is information to help users become financially literate. It is neither investment, tax nor legal advice, is not intended to be relied upon as a forecast, research or investment advice, and is not a recommendation, offer or solicitation to buy or sell any securities, enter into any loan, mortgage or insurance agreements or to adopt any investment strategy. Tax, investment and all other decisions should be made, as appropriate, only with guidance from a qualified professional. We make no representation or warranty of any kind, either express or implied, with respect to the data provided, the timeliness thereof, the results to be obtained by the use thereof or any other matter. Advertisers are not responsible for the content of this site, including any editorials or reviews that may appear on this site. For complete and current information on any advertiser product, please visit their website.

†Terms and Conditions apply.