Before you respond
QR code messages
Learn QR code scam warning signs, including fake traffic notices, payment links, login pages, pasted codes, and safe ways to verify before scanning.
Reviewed June 10, 2026
Quick answer
A QR code may be risky if it appears in an unexpected message, invoice, parking notice, traffic hearing notice, package note, or account warning.
Before scanning, check where the code came from and whether you can use an official app or website instead.
At a glance
QR code messages can hide risky links inside scan-to-pay codes on messages, invoices, signs, or copied notices.
- The code appears in an unexpected message, flyer, invoice, parking notice, court notice, or package note.
- The notice uses an official-looking state seal, fake case number, or hearing date to look credible.
- It sends you to a page asking for login, payment, identity, or card information.
Do not scan a code from an unexpected message if you can verify another way.
How QR codes can hide risky links
A QR code hides the destination until you scan it. The code may appear in a text, email, invoice, parking notice, traffic warning, package note, or public sign. A copied page can then ask for login, card, payment, or identity information.
Treat unexpected QR codes like unexpected links. Before scanning, ask whether there is a safer way to reach the same place. For court, traffic, toll, or parking claims, go to the official site yourself or call a verified number. If the QR code came through a text, compare it with message and link-check patterns.
What it may look like
"Traffic hearing notice: scan this QR code to pay your fine now and avoid default judgment or enforcement action."
Signs to slow down
- The code appears in an unexpected message, flyer, invoice, parking notice, court notice, or package note.
- The notice uses an official-looking state seal, fake case number, or hearing date to look credible.
- It sends you to a page asking for login, payment, identity, or card information.
- A sticker or printed code may have been placed over a real code.
- The message creates urgency around a bill, account, delivery, parking, traffic violation, or toll.
What to do next
- Do not scan a code from an unexpected message if you can verify another way.
- Use the official app or type the official website yourself.
- For court or traffic notices, check the court website or call the court directly using contact information you know is correct.
- Check the web address before entering any information.
- Do not enter passwords, codes, card numbers, or identity details from a QR link.
How to report it
- Do not enter login, payment, or identity details after scanning an unexpected QR code.
- Use the FTC reporting site if the QR code asked for payment, identity details, or account access.
- Contact the affected court, agency, bank, or account provider directly if you entered information.
How Olevo can help
Olevo can give you a calm second opinion before you respond.
If the QR code appears on a notice, take a photo for Detailed Review; if there are visible words you can type, paste them for a Private Check.
Trusted sources
FTC QR code guidance
Federal Trade Commission
FTC guidance explains why QR codes in unexpected messages, notices, or signs deserve careful verification.
FTC traffic notice guidance
Federal Trade Commission
FTC guidance describes official-looking traffic notices with QR codes, payment pressure, and identity requests.
FBI sender identity guidance
Federal Bureau of Investigation
FBI guidance explains that sender names, phone numbers, email addresses, and websites can be disguised.
Common questions
Can a QR code hide a bad link?
Yes. You usually cannot see the destination until after scanning, so treat unexpected QR codes like unexpected links.
Are QR codes always unsafe?
No. They can be useful, but it is safer to use official apps or websites for payments and account action.
What should I check after scanning?
Look carefully at the web address before entering any login, payment, or identity information.
Can a fake traffic notice use a QR code?
Yes. The FTC has warned about texts with QR codes, fake case numbers, and court threats that try to steal payment or identity information.
Can a QR code take me to a fake payment page?
Yes. A QR code can hide a risky link until after you scan it, so verify the source and web address before entering payment or login details.