In one sentence: A QR code scam is when a scammer uses a QR code to send you to a fake website or to install harmful software.
Why it matters: Scammers cover real QR codes, for example on parking meters, or send codes by text or email with an urgent reason to scan. A setup code shown on the real website after you sign in, such as when you add an authenticator app, is different.
One thing to do: Do not scan a QR code from an unexpected message. Contact the company using a website or number you know is real.
Related terms: phishing, smishing, social engineering
Learn more: Authenticator Apps: What They Are and How to Set One Up
Checked: 25 Oct 2026.
