Parking Meter QR Code Scam: 7 Red Flags Before You Pay

You park, find the meter, and see a neat little sticker: “Scan to pay.” It takes ten seconds and you’re late. That convenience is exactly what the parking meter QR code scam is built on. Here’s the verdict up front: if a QR code sticker on a meter asks for your card details, treat it as a scam until you’ve proven otherwise. In many cities, the official meters don’t use QR codes for payment at all.

This isn’t a theory. On September 30, 2026, the Manhattan District Attorney announced an indictment over 64 fake QR code stickers on Manhattan parking meters. The same week, police in Ann Arbor, Michigan, warned drivers about fake “Scan to Park!” stickers downtown.

Below: how the trick works, the real cases, the new versions showing up on windshields and phones, and exactly what to do if you already paid.

Why the parking meter QR code scam works so well

Most scams have to reach you. This one waits for you.

It sits on a real object. The sticker is on an actual city meter, so it borrows the meter’s trust.
You’re rushed. Nobody wants a ticket. People pay fast and think later.
QR codes hide the address. You can’t read a QR code with your eyes, so you don’t see where it leads until you’ve already scanned it.
Paying by phone is normal now. Many cities really do use parking apps, so a “scan to pay” sticker doesn’t look odd.
The fake site looks official. In the Manhattan case, prosecutors say the site used the real ParkNYC logo.

How the scam works, step by step

The sticker goes up. A scammer prints QR code stickers and places them on meters or pay stations, sometimes right on top of the real city sticker.
You scan it. Your phone opens a website that looks like the city’s parking payment page.
The site asks for everything. Card number, expiration date, security code, phone number, billing address and license plate are typical.
You “pay.” Sometimes the page just spins, errors out, or charges a small amount so it seems real.
Your data is sold or used. The card can be charged later, sold, or used to sign you up for subscriptions. Your phone number and plate can feed follow-up scams.
The sticker comes down. Once the city finds it, the scammer just moves to the next block.

A real case: 64 fake stickers on Manhattan meters

On September 30, 2026, Manhattan District Attorney Alvin Bragg and the NYC Department of Investigation announced the indictment of a 39-year-old Brooklyn man. Prosecutors say he placed 64 fraudulent QR code stickers on Manhattan parking meters.

According to the DA’s office, the stickers led to a website using the PARKNYC logo. It asked for credit card numbers, expiration dates, phone numbers, billing addresses and license plate numbers.

The scheme started to unravel when a driver scanned a sticker on a meter near 79 East 10th Street. The driver noticed the sticker had been layered over the real ParkNYC sticker and alerted authorities before losing money. The city’s Department of Transportation then checked meters across Manhattan. Investigators say they connected the defendant to the website account and to purchases of shipping labels used to make the stickers.

He faces identity theft and criminal impersonation charges. As the DA’s office notes, the charges are only allegations, and he is presumed innocent unless proven guilty. Bragg said paying to park shouldn’t “end in identity theft.”

It isn’t only New York. Raleigh, North Carolina, warned drivers in January 2026 about stickers reading “Scan here to pay for parking.” On October 1, 2026, Ann Arbor police warned about stickers labeled “Scan to Park!” and “Park AA.” And in September, the FTC put out a national alert about scammers covering legitimate QR codes on meters.

ScamRead Scam Checker

Got a parking text or a link you’re not sure about?

Paste the “unpaid parking” text, the email, or the link a QR code points to into ScamRead. You’ll get a plain-English read on the red flags in seconds, before you pay anything.

Check it free →

New variants to watch for

The sticker on the meter is just one version. The same playbook now shows up in other places:

Fake parking tickets on your windshield. Police in Santa Cruz, California warned about counterfeit citations with QR codes that lead to fake payment sites.
“Unpaid parking” texts. In March 2026, Providence police warned about texts posing as parking violation notices. They said the department “would never request payment over a text or through a phone.”
Fake court notices about parking fines. In February 2026, the Maryland Judiciary warned about texts titled “Notice of Default – Unpaid Parking Fine” that threatened license suspension. The courts said they don’t ask for payment or personal information by text, phone or email. (Fake court threats are a whole genre; see our guide to jury duty scam calls.)
QR codes on flyers, garages and EV chargers. Any public QR code that leads to a payment page can be swapped the same way.

The scammer’s toolkit

Tool	What it does	Why it works
Printed QR sticker	Sends you to the scammer’s site instead of the city’s	Sits on a real meter, so it borrows real trust
Look-alike payment page	Copies the city logo and layout	Looks right on a small phone screen
Look-alike web address	Uses a name close to the real one	Most people never read the address bar
Fake ticket or text	Says you owe a fine	Fear of late fees makes people act fast
Small or “failed” charge	Makes the payment feel normal	You don’t notice anything wrong until later

Red flags of a parking meter QR code scam

The QR code is a sticker on top of another sticker, or looks crooked, bubbled or freshly placed.
The meter already shows city signage for an official app, and the sticker points somewhere else.
After scanning, the web address doesn’t match the city or the official parking app, or it’s a short link.
The page asks for more than parking needs: full billing address, date of birth, or ID details.
It pushes you to download an app from a link instead of from the App Store or Google Play.
The page is slow, keeps “loading,” or shows an error after you enter your card.
A ticket, text or email says you owe a fine and gives only a QR code or link to pay.

How to check if a parking QR code is real

Look for the city’s official instructions. Read the meter itself. Cities print the name of their official app or payment method on the meter or nearby signs.
Use the official app directly. Download it from your phone’s app store, not from a QR code. Then enter the zone number shown on the meter.
Or just pay at the meter. Coins or card at the machine avoids the problem entirely.
Check the address before you tap. Many phone cameras show the web address before opening it. If it isn’t clearly the city’s or the official app’s site, stop.
Got a ticket, text or email instead? Don’t scan or tap anything. Look up the city’s parking or court website yourself and search by citation number or plate.

Not sure about a link or a message? Copy the link (or the whole “unpaid parking” text) and paste it into the free ScamRead scam checker before you open it or pay. It’s built for exactly this moment: a suspicious text, email or link you’re unsure about.

Fake payment pages aren’t only on meters, either. Our guide on how fake websites drain American bank accounts shows how to spot a copycat site.

Already paid or shared info? Do this now

Move fast. The sooner you act, the more you can stop.

Call your card issuer or bank. Use the number on the back of your card. Report the charge as fraud, cancel the card and ask for a new number.
Check your statements. Look for small “test” charges and new subscriptions over the next few weeks.
Change passwords if you created an account or entered a login on the fake site. Turn on two-factor authentication.
If you shared your Social Security number or ID, freeze your credit for free at Equifax, Experian and TransUnion, and go to IdentityTheft.gov for a recovery plan.
Report it. File at ReportFraud.ftc.gov and the FBI’s ic3.gov. Tell your city’s parking or transportation department where the sticker was, and call local police.
Expect follow-up scams. Scammers who have your phone number may text “refund” offers or fake bank alerts next. Paste any of those into the ScamRead checker before you reply.

How scammers get caught

Fake stickers feel anonymous, but they leave trails:

The website. Every fake site has a domain, a hosting account and a payment trail. In the Manhattan case, investigators say they tied the defendant to the website account.
The supplies. Prosecutors say shipping-label purchases helped link him to the stickers.
The money trail. Stolen cards get used somewhere. Banks and investigators follow those charges, and the people who cash them out.
Your report. The Manhattan case began with one driver who noticed a sticker over a sticker and spoke up. Reports to your city, the FTC and IC3 help connect cases across cities.

ScamRead Scam Checker

Scammers rarely stop at one message

If your card or phone number ended up on a fake parking site, expect follow-up texts and emails. Paste any suspicious message or link into ScamRead before you click or reply.

Check a message →

FAQ

Do parking meters have QR codes?

Some cities use QR codes on signs to point you to their official app, but many don’t use them for payment at all. NYC officials have said their meters don’t ask you to scan a QR code to pay. When in doubt, use the official app or pay at the machine.

How do I know if a QR code is a scam?

Check whether it’s a sticker on top of something else, read the web address before opening it, and compare it to the city’s official app or site. If a code leads to a page asking for card details, stop and verify another way.

What happens if I scanned a fake parking QR code but didn’t pay?

Scanning alone usually isn’t the main risk; entering your information is. Close the page, don’t download anything it suggests, and clear your browser tabs. If you entered anything at all, follow the steps above.

Is the “unpaid parking” text I got a scam?

Very likely. Several cities and courts have said they don’t demand parking payments by text. Look up your city’s parking site yourself, or paste the message into a scam checker before tapping any link.

Can scanning a QR code hack my phone?

Scanning by itself rarely does damage. The danger is what comes next: a fake page that asks for your card, a login, or tells you to install an app. Keep your phone updated and never install apps from a QR code link.

The bottom line

The parking meter QR code scam works because it’s convenient and it looks official. The fix is just as simple: don’t pay through a sticker. Use the official app, pay at the machine, or look up your ticket yourself. And if a parking text, email or link has you second-guessing, run it through ScamRead first. It takes less time than feeding the meter.

Parking Meter QR Code Scam: How a Sticker Steals Your Card (and the One Rule That Stops It)