No, you should not scan a QR code stuck onto a parking meter, sign, or kiosk unless you can verify it was placed there by the city or parking operator. Scammers have been placing fake QR code stickers over or next to legitimate ones in parking lots and on street meters across the country. When you scan the fake code, it takes you to a convincing fake payment page that steals your credit card number, or it prompts you to download a malicious app.
This scam works because QR codes are just encoded links, and your phone cannot tell you whether the destination is legitimate before you tap it. Unlike a phishing email, there's no sender address or subject line to scrutinize. All you see is a square of black and white pixels, and your phone's camera happily opens whatever URL is hidden inside.
Before scanning any QR code in a public parking area, look closely at the sticker itself. Is it slightly crooked, printed on a different material than the rest of the sign, or placed over what looks like another code? Peeling stickers, mismatched fonts, or codes taped on top of official signage are red flags. Legitimate parking codes are usually printed directly onto the meter or sign during manufacturing, not added as an afterthought.
A safer approach is to skip the QR code entirely and use the official parking app for that city or that parking company, which you can download directly from the Apple App Store or Google Play. Most major cities and parking operators (ParkMobile, PayByPhone, SpotHero, and similar services) have well-known official apps. Typing the parking zone number directly into a verified app is far safer than scanning a sticker of unknown origin.
If you do scan a code and it takes you to a payment page, check the web address before entering any information. Look for the correct spelling of the parking company's name, a secure connection indicator, and a URL that matches what you'd expect from that company's actual website. If the page asks for unusual information like your full card number plus a one-time PIN sent by text, your driver's license number, or your social security number, back out immediately. Legitimate parking payments only need your license plate and card details.
If you already entered payment information on a suspicious page, contact your card issuer right away to report possible fraud and ask about a replacement card. Monitor your statements closely for the next several weeks, since fraudulent charges sometimes start small to test whether the card is still active before larger charges follow. You can also report the fake sticker to the city's parking authority or 311 line so they can remove it and warn other drivers.
As QR codes have become common for menus, flyers, parking, and event check-ins, scammers have adapted quickly because the format hides the destination so well. Treating any unexpected public QR code with the same caution you'd apply to an unsolicited link in a text message is the simplest way to stay protected.