QR Code Ticket Transfer Scam via SMS Text Messages
Scammers send text messages with a QR code or transfer link claiming to hand over a purchased ticket, but the code is fake, expired, or leads to a credential-harvesting page.
Part of: QR Code Ticket Transfer Scam
Last reviewed: 5 July 2026
Because legitimate ticket platforms genuinely do send SMS confirmations and transfer links, a text message claiming to contain a QR code ticket transfer doesn't look out of place — which is exactly why it works as a scam vector. Text messages also strip away visual context like a verified sender name or company letterhead, making it hard to tell a real transfer notification from a fabricated one.
On SMS specifically, the short message format and the small on-screen QR image encourage a quick tap without close inspection, and most phones don't preview where a link actually leads before you open it.
How this scam works on SMS text messages
A buyer who has arranged a private ticket sale receives a text saying 'here is your ticket transfer, scan this QR code to accept,' often sent from a number disguised to look like it could be a short-code or business line. The QR code may lead to a fake login page mimicking a ticketing platform, capturing the buyer's account credentials, or it may simply be a static image that displays fine on the seller's phone but has already been scanned and used elsewhere.
In other variations, the seller sends a legitimate-looking transfer link by text but times it so the 'accept' window has already expired by the time the buyer clicks it, or the code is a duplicate of a barcode already used for entry, only becoming apparent when the buyer is turned away at the gate.
Common red flags
- QR code or transfer link arrives by text from an unfamiliar or spoofed-looking number rather than the ticketing platform's official app or email
- Link in the text asks you to log in with your ticketing account username and password
- Seller cannot also show the transfer pending or completed inside the official ticketing app itself
- Message pressures you to scan or click immediately 'before it expires'
- No option to verify the transfer through the ticketing platform's own transfer history
- Text contains urgent, generic language with spelling issues or an unfamiliar shortened link
How to protect yourself
- Only accept ticket transfers through the ticketing platform's own official app or website, not a QR code sent by SMS
- Never enter your ticketing account username or password on a page reached by tapping a texted link
- Ask the seller to initiate the transfer directly to your account email inside the platform, which you can verify independently by logging in yourself
- Check your ticketing app's 'transfers' or 'my tickets' section rather than relying on any image sent to you
- Do not scan QR codes from unknown or unverified senders under any circumstances
- If the seller can't or won't use the platform's built-in transfer tool, treat the sale as high risk
How to report it
- Forward the scam text to 7726 (SPAM) in the US or the equivalent short code your carrier supports to report SMS fraud
- Report the incident to the ticketing platform's official fraud or support channel
- File a report with the FTC at reportfraud.ftc.gov (US), Action Fraud (UK), or your local equivalent
- If credentials were entered on a fake page, change your ticketing account and email passwords immediately and enable two-factor authentication
Frequently asked questions
Can a real ticket transfer legitimately arrive by text message?
Some platforms do send SMS notifications that a transfer is pending, but the actual acceptance should always happen by logging into the official app or website directly, not by scanning an image embedded in the text.
What happens if I scan a QR code that leads to a fake login page?
Any username and password you enter can be captured and used to take over your real ticketing account, so you should change that password immediately, check for unauthorized transfers, and enable two-factor authentication.
How can I tell if a texted QR ticket is a duplicate?
You generally can't tell from the image alone; the only reliable check is confirming the transfer appears in your own ticketing account, since a barcode can be screenshotted and reused by a scammer even after it's been scanned once.