The QR Code on a Parking Meter Could Be a Trap
Photo source: Flickr
You pull into a car park, find a sign explaining how to pay, and notice a QR code promising a quick, cashless transaction. Scanning it seems easier than downloading an app or searching for a payment website. But before you reach for your phone’s camera, take a moment to make sure the code actually belongs to the parking operator.
QR code scams can involve criminals placing fraudulent stickers over legitimate codes on parking signs, meters, or payment machines. The replacement code may lead to a convincing imitation of an official payment page, designed to collect card details or personal information. The risk is that the sign looks genuine even when the website behind it is not.
Start by checking the physical sign. Look for a sticker that appears to have been placed over another code, damaged signage, or inconsistent branding. These clues do not prove fraud, but they are reasons to pause. If the payment instructions look unusual, use the parking operator’s official website or app instead.
Your phone can offer another layer of protection. After scanning a code, look at the website address before opening it. Be cautious if the domain contains misspellings, extra words or an unfamiliar ending. A padlock symbol and an address beginning with HTTPS indicate an encrypted connection, but they do not prove that the website is legitimate.
Avoid entering payment details simply because a page displays the car park’s logo. Check that the payment provider matches the information on the official signage. If you are unsure, contact the operator using a phone number obtained independently, rather than one shown on the suspicious page. New Zealand’s National Cyber Security Centre recommends verifying unfamiliar links and using trusted channels when dealing with unexpected online requests.
If you have already entered your card details on a suspicious page, contact your bank immediately using its official number or banking app. Ask whether the card should be blocked, monitor transactions, and report the incident to the appropriate authorities. If you entered a password, change it anywhere you have reused it.
QR codes are not inherently dangerous, and many legitimate parking services use them. The important habit is to verify where they lead before sharing sensitive information. A few seconds of caution can help prevent a convenient parking payment from becoming an expensive problem.
