Vigilance Spotlight: QR Code Phishing at Airports — In-Person Scam Watch

Full sweep conducted across all five mandatory sources for October 13 – October 19, 2026. No new qualifying airport or in-person scam pattern was identified. TSA, AAA, the U.S. State Department, IATA and BBB Scam Tracker published no new airport-scam advisories, and no new pattern was reported by two or more reputable outlets. The travel-scam warnings that did circulate this week were about fake booking sites, fake airline customer-service numbers and fake flight notifications reached by phone, text or search — those are remote scams covered in the Monday report, not here. Below is this week's Continued Vigilance Spotlight: an existing pattern worth keeping in mind as holiday travel bookings pick up. It is not a new alert.

TSA — No new advisory (site unavailable; checked via search) ✓ AAA Travel — grounds the spotlight U.S. State Department — No new airport-scam item IATA — No passenger-facing item (agent-fraud notices only) BBB Scam Tracker — No travel-category trend published

Continued Vigilance Spotlight — Ongoing Alert (not a new finding)

// Vigilance Spotlight · Airport Scams · Ongoing Alert

QR Code Phishing ("Quishing") at Airports — A Fake Sticker Over a Real Code Sends You to a Look-Alike Payment or Login Page

Airports are full of QR codes: parking pay stations, Wi-Fi sign-in signs, rental-car and shuttle stands, restaurant menus and lounge posters. In this scam, someone sticks their own printed QR code over the real one. It takes seconds and needs no technical skill. When you scan it, your phone opens a page that looks like the parking operator, the airport Wi-Fi portal or a payment service, and asks for your card details, a login or an app download. The money or information goes straight to the scammer, and the real service never receives your payment.

// How It Plays Out

1You're rushing to pay for parking or get online at the gate, and scan the QR code on the sign.

2The code is actually a sticker placed over the real one. Your phone opens a page with the right logo and colours but a slightly different web address.

3The page asks for your card number, a login, or to install an "app" to finish paying or connecting.

4Your card is charged or your details are stolen — and if you were paying for parking, you may still get a ticket because the real operator was never paid.

// Why Continued Vigilance Is Warranted Right Now

AAA lists QR code phishing first among the airport scams it warns travelers about, noting that "scammers often cover legitimate QR codes with fake stickers," and travel-consumer groups include it in their 2026 lists of the worst airport scams. Thanksgiving and holiday trips are being booked now, and busier terminals, packed parking garages and rushed travelers are exactly the conditions this scam relies on. QR codes have also replaced paper menus and pay machines in many places, so travelers scan them by habit.

▶ How to Protect Yourself

Before you scan, touch the code. If you can feel a sticker edge or it looks placed on top of the sign, don't scan it.
Read the web address your phone shows before opening it. If it doesn't match the airport, parking company or brand you expect, close it.
Pay in the official app or at the machine instead. Type the operator's website yourself, or pay by card at the kiosk or with cash.
Never install an app from a QR code on a sign. Get apps only from your phone's official app store.
Use your phone's own data rather than "free Wi-Fi" sign-in pages when you need to pay for anything.
If you've already entered card details, call your card issuer using the number on the card and report it at ReportFraud.ftc.gov.

If a QR code is on a sticker, don't scan it — type the web address yourself or pay at the machine.

Ongoing Alert Airport Scams QR Code Phishing

Sources: AAA — Airport Scams and How to Avoid Them (mandatory source) · Travelers United — The seven worst 2026 airport scams (Mar 2, 2026) · Earlier coverage: our August 13, 2026 In-Person edition