⚠️ SCAM WARNING: That parking-meter QR code may lead to a fake payment page

The new development is the indictment, not a brand-new scam

This week brought a prosecution update, not the discovery of a new tactic. NYC DOT issued its original warning on June 6, 2025. The FTC published separate parking-QR guidance on September 3, 2026. Those dates matter: an older incident can still offer a useful protective lesson without being described as a new outbreak.

Sources: Manhattan District Attorney's Office · New York City Department of Transportation · Federal Trade Commission

Why the sticker can look trustworthy

The strongest part of the trick is the setting. A sticker attached to a real city meter can inherit credibility from the equipment around it, and a fake page can continue the illusion by copying the name or logo of the real parking service.

A familiar-looking payment page is not an independent check on the sticker that sent you there. The logo and the link are part of the same request. Verification means leaving that path, not looking for another reassuring detail inside it.

Sources: Federal Trade Commission

Use a payment path you verified independently

In New York City, officials say parking meters do not use QR codes for payment. Drivers should use the official ParkNYC app or pay at the physical meter. That rule is specific to New York City. Other cities or private parking operators may legitimately use QR codes, so the broader safety rule is to verify the payment method through the operator's official website or app before scanning.

If a QR reader previews a web address, inspect it before opening the page. A familiar logo on the destination is not enough. If anything about the sticker, URL or payment page looks unusual, close it and start again from a source you found yourself.

Sources: New York City Department of Transportation · Federal Trade Commission

If you already scanned or entered information

Scanning a code by itself does not automatically mean money was stolen, but the next steps depend on what happened after the scan. If you entered payment information on a suspicious page, contact the bank or card issuer promptly, explain what happened and review recent transactions. New York City also advises people who believe they were victimized to notify law enforcement.

If you entered a password, the FTC recommends changing it immediately and changing it anywhere else you reused it. Review your financial accounts for transactions you do not recognize and report suspected fraud to ReportFraud.ftc.gov.

Sources: New York City Department of Transportation · Federal Trade Commission

PhoneYa adds context, not a safety certificate

If a questionable parking message also includes a phone number, PhoneYa can add community context. A number lookup cannot certify the QR code, website or sender as safe. Use the parking operator's official website or app to check the request independently.

You can look up or report suspicious calls and texts on PhoneYa. Describe what the caller or sender asked you to do, but do not post account numbers, payment details or other private information. Community reports are useful context, not proof of identity.