The QR Code Parking Ticket Scam: The City Didn't Leave That

Also filed under: QR code parking ticket scam · fake parking citation scam · quishing · windshield ticket scam

That ticket on your windshield telling you to scan a QR code and pay before the fine doubles is, in nearly every case, not from the city. It's a checkout page into a stranger's account, dressed in municipal fonts. A handful of cities do print QR codes on real citations, which is exactly the cover this scam hides behind, but the scan-here-pay-now sticker with a doubling deadline is a con with a print budget.

It works because everything about it is plausible. You did park somewhere. You possibly parked badly. The ticket looks official enough, the fine is small enough to just pay, and the deadline is there so you settle up before the part of your brain that asks questions has finished its coffee.

How the con runs

The overhead on this scam is a laser printer and an afternoon. The scammer prints a stack of official-looking citations, picks a street where parking rules are ambiguous enough that everyone feels a little guilty, and tucks one under every wiper. The QR code routes to a payment page or a personal payment app that has nothing to do with any government.

The pressure is doing the real work. 'Pay within 24 hours or the fine doubles' converts a forty dollar annoyance into an urgent errand. Forty dollars is also a deliberately chosen number: painful enough to be believable, small enough that almost nobody calls city hall to verify. The scam is priced below your curiosity.

And the forty dollars is often just the appetizer. If the code led to a fake payment page, you didn't only pay a fake fine, you typed your card number into a form built by the kind of person who fakes parking tickets. That number gets reused or sold, and the follow-on charges arrive weeks later with no obvious connection to the ticket.

The same skeleton shows up everywhere once you see it: QR stickers pasted over the real codes on parking meters and pay stations, texts about unpaid tolls with a pay-now link, fake citation emails. Different costume, same move. A payment prompt that arrives with a deadline attached is asking you to hurry for a reason.

Play defense

• Never pay through a code printed on the ticket itself. Look up the city's parking portal independently and search the citation number there.
• No record on the official portal means no ticket. You're done. Keep the paper as a souvenir or hand it to the police.
• Real citations name the agency, the ordinance, and your vehicle. Anything routing to Venmo, Cash App, Zelle, or crypto is a scam; no city on earth takes Venmo.
• Check the payment page's actual domain if you did scan. A city site ends in .gov far more often than a scammer can fake, and 'city-parking-pay.com' is not your city.
• Report the fake to the city's parking enforcement and the police non-emergency line. You were not the only windshield on that block.

Already got hit?

1. Paid by card: call your issuer now, dispute the charge, and ask for a replacement card. Assume the number is compromised, because it was entered on a scammer's form.
2. Paid through Venmo, Cash App, or Zelle: report the scam inside the app immediately and call your bank. Recovery on these rails is uneven, and speed is most of your odds.
3. Watch your statements for weeks. The fake fine and the card-harvesting are two separate revenue streams, and the second one is patient.
4. Report it at reportfraud.ftc.gov and ic3.gov, and tell the city's parking authority so they can warn residents and sweep the area.
5. If you have the ticket, keep it. Physical evidence with a printed QR code is unusually useful to investigators, who mostly get stories.

Questions people ask at 2 a.m.

All case files →