Before you respond
QR code messages
Learn QR code scam warning signs, including fake traffic notices, payment links, login pages, pasted codes, and safe ways to verify before scanning.
Reviewed June 10, 2026
Quick answer
A QR code may be risky if it appears in an unexpected message, invoice, parking notice, traffic hearing notice, package note, or account warning.
Before scanning, check where the code came from and whether you can use an official app or website instead.
At a glance
QR code scams hide risky links inside scan-to-pay codes on messages, invoices, signs, or fake notices.
- The code appears in an unexpected message, flyer, invoice, parking notice, court notice, or package note.
- The notice uses an official-looking state seal, fake case number, or hearing date to look credible.
- It sends you to a page asking for login, payment, identity, or card information.
Do not scan a code from an unexpected message if you can verify another way.
How QR code scams hide risky links
QR code scams are sometimes called quishing because the code hides the destination until you scan it. The code may appear in a text, email, invoice, parking notice, traffic warning, package note, or public sign. A fake page can then ask for login, card, payment, or identity information.
Treat unexpected QR codes like unexpected links. Before scanning, ask whether there is a safer way to reach the same place. For court, traffic, toll, or parking claims, go to the official site yourself or call a verified number. If the QR code came through a text, compare it with unpaid toll and text scam patterns.
What it may look like
"Traffic hearing notice: scan this QR code to pay your fine now and avoid default judgment or enforcement action."
Signs to slow down
- The code appears in an unexpected message, flyer, invoice, parking notice, court notice, or package note.
- The notice uses an official-looking state seal, fake case number, or hearing date to look credible.
- It sends you to a page asking for login, payment, identity, or card information.
- A sticker or printed code may have been placed over a real code.
- The message creates urgency around a bill, account, delivery, parking, traffic violation, or toll.
What to do next
- Do not scan a code from an unexpected message if you can verify another way.
- Use the official app or type the official website yourself.
- For court or traffic notices, check the court website or call the court directly using contact information you know is correct.
- Check the web address before entering any information.
- Do not enter passwords, codes, card numbers, or identity details from a QR link.
How to report it
- Do not enter login, payment, or identity details after scanning an unexpected QR code.
- Report QR code scam attempts to ReportFraud.ftc.gov.
- Contact the affected court, agency, bank, or account provider directly if you entered information.
How Olevo can help
Olevo can give you a calm second opinion before you respond.
If the QR code appears on a notice, take a photo for Detailed Review; if there are visible words you can type, paste them for a Private Check.
Trusted sources
Scammers hide harmful links in QR codes to steal your information
Federal Trade Commission
FTC guidance warns that QR codes can hide harmful links that ask for account, payment, or identity information.
That text about a traffic violation is probably a scam
Federal Trade Commission
FTC guidance describes official-looking text messages with QR codes, urgent payment pressure, and attempts to steal personal or payment information.
Spoofing and Phishing
Federal Bureau of Investigation
FBI guidance explains that spoofing can disguise phone numbers, sender names, emails, and websites.
Common questions
Can a QR code hide a bad link?
Yes. You usually cannot see the destination until after scanning, so treat unexpected QR codes like unexpected links.
Are QR codes always unsafe?
No. They can be useful, but it is safer to use official apps or websites for payments and account action.
What should I check after scanning?
Look carefully at the web address before entering any login, payment, or identity information.
Can a fake traffic notice use a QR code?
Yes. The FTC has warned about texts with QR codes, fake case numbers, and court threats that try to steal payment or identity information.
Can a QR code take me to a fake payment page?
Yes. A QR code can hide a scam link until after you scan it, so verify the source and web address before entering payment or login details.