Is a QR code on a parking meter safe?
Not automatically. Fake QR code stickers placed over legitimate ones are a known fraud — always verify the URL before entering payment details.
Last reviewed: 1 June 2026
Explanation
QR code fraud ('quishing') on parking meters involves scammers placing a sticker with their own QR code over the official one. Scanning it takes you to a convincing fake payment page that captures your card details or redirects to a different parking app.
Before scanning, inspect the meter: look for a sticker that appears to be placed on top of printed material, check that the URL shown in your camera app matches the official operator, and look for signs on the meter or nearby that confirm the correct payment method. Many parking operators also print the official website and a phone number directly on the machine.
If you have already entered card details on a parking payment page that looked unusual, contact your bank to check for unauthorised transactions and consider replacing your card.
Common red flags
- QR code appears to be a sticker placed over the original surface
- URL shown in your camera app is unusual or doesn't match the known operator
- Payment page looks different from what you've used at this location before
- Page asks for more information than a standard parking payment requires
- The meter has no other identifying information about the official payment method
What to do now
- Inspect the QR code for signs it is a sticker over the original
- Check the URL your camera shows before tapping
- Use the meter's phone number or official app instead of the QR code if in doubt
- If you entered card details on a suspicious page, contact your bank
- Report any suspicious QR stickers to the parking operator and local council
Frequently asked questions
How can I tell if a QR code is a sticker?
Look for raised edges, a slightly different texture or colour to the surrounding surface, or a label that overlaps the original printed information. Peeling at a corner may reveal another QR code beneath.
Is it safer to type the URL manually than to scan a QR code?
Yes. Typing the known official URL directly into your browser removes the risk of a fraudulent redirect, though you must be careful to type it correctly.