In-Person Scam Watch — August 13, 2026

Fake QR Code Stickers Are Being Placed Over Real Ones at Airports Across the US — Cases Up 146% in 2026

QR codes are everywhere in modern airports — on boarding pass kiosks, lounge access signs, baggage information boards, currency exchange desks, cafés, and Wi-Fi login signs. Scammers exploit this familiarity by printing counterfeit QR code stickers and physically placing them over the legitimate codes already posted in these locations. The swap takes under sixty seconds and is nearly invisible to a rushed traveler who simply points their phone camera at the code and taps the link.

When you scan a tampered code, your phone is redirected to a spoofed website — built to look exactly like a real airline, airport, lounge, or payment service — that asks for your credit card number, login credentials, or personal information. Because you are at the airport and the code is physically on the sign or kiosk you expected to interact with, the request feels legitimate. By the time you realize what happened, your card details or account credentials are already in the scammer's hands.

The physical detection method that works: run your finger over the QR code before scanning. A legitimate code printed directly onto a sign feels flat and flush. A scammer's sticker placed on top feels slightly raised at the edges, may be peeling, or may be subtly misaligned with the surrounding design. This takes two seconds and is the single most reliable on-the-ground check available without any technology.

Miami · Dallas · Seattle · Philadelphia — identified as the four highest-incidence cities for QR code phishing in travel locations by a travel security alert published August 8, 2026. Airport hubs with high international passenger volumes are the primary target locations, as travelers from abroad are less familiar with local app naming conventions and more likely to trust a physical QR code sign at face value.

• The QR code sticker feels raised, peeling, or slightly misaligned when you run your finger across it — this is the clearest physical indicator of a tampered code
• After scanning, the URL that appears in your browser doesn't match the airport, airline, or service you expected — always check the web address before entering any information
• The page asks for payment, credit card details, or login credentials in a context where you didn't expect to pay — legitimate QR codes for Wi-Fi access, lounge check-in, or baggage status don't typically require card numbers upfront
• The scanned page looks slightly "off" — different fonts, unusual spacing, or a logo that doesn't quite match what you've seen elsewhere from that airline or airport
• A QR code that you didn't expect to see appears on a surface where one wasn't before — trust your memory; if the code looks newly placed, it may be

• Run your finger over any QR code before scanning in an airport or travel setting — flat and flush is legitimate; raised or peeling means don't scan
• Check the web address after scanning, before entering anything — if the URL doesn't exactly match the airline, airport, or service you expect, close the page immediately
• For airport Wi-Fi: ask a staff member for the exact network name rather than scanning a code — most airport information desks and gate agents know the correct Wi-Fi name
• For lounge access: verify directly at the lounge desk rather than via a QR code on a sign nearby
• If you believe you scanned a tampered code and entered information, contact your bank immediately to flag potential fraud and request a card replacement — acting within minutes dramatically improves your chances of stopping unauthorized charges
• Report suspected tampered QR codes to airport staff — they can have the code physically removed and the area checked, protecting the next traveler