How to avoid QR code parking scams as warnings issued

Drivers are being warned about fake QR codes appearing on parking payment machines.

Councils say scammers are placing QR code stickers on machines to trick motorists into entering bank details on fraudulent websites – a crime known as "quishing".

Cheltenham Borough Council confirmed fake QR codes had been found in several council‑run car parks, while Swindon Borough Council said it had also received reports of similar scams. Both councils stressed they did not use QR codes for parking payments.

Authorities said parking officers were removing fake stickers and urged drivers to stay alert.

When scanned, the fake QR codes direct users to websites controlled by the scammers which trick them into handing over data such as bank details.

Figures from national fraud reporting centre Action Fraud showed 1,386 reports of quishing in 2025, up from just 100 in 2019. Car parks are now one of the most common locations for the scam, it said.

Swindon Borough Council said: "While an app may be needed to pay for parking, we will not ask you to scan a QR code to download it."

The council added new parking machines would be installed later this year, allowing drivers to pay by card instead of using an app.

Cheltenham Borough Council said it no longer used QR codes and confirmed officers were patrolling car parks to remove any fake stickers.

Similar warnings were issued by Somerset Council in 2025 after QR code scams were reported in Frome, Glastonbury, Street and Shepton Mallet.

• If in doubt, do not scan. Scanning QR codes in open spaces, like car parks might pose a greater risk than somewhere like a pub or restaurant as it is easier for criminals to tamper with. If you are unsure, use your search engine to find the official website or app to make a payment.
• Check for signs codes may have been tampered with. Usually, a sticker placed over the legitimate QR code, sometimes at an angle.
• Preview the website address before following it. When you scan a QR code, check the address to make sure it corresponds with what you were expecting.
• Avoid using a QR code to make a payment if you can, look for other payment options like contactless payment or a legitimate website or app.

Most councils use PayByPhone for payments in their car parks. The company says it no longer provides QR codes for UK car parks.

It encourages drivers to pay for parking via its app - which can be downloaded from the Google Play Store or Apple App store - or go to the company's website on a browser.

If you lose any money to a scam, call your bank immediately using the number on the back of your bank card. Report the incident to Report Fraud or call the police.

You can seek free, confidential advice from Victim Support.

Follow BBC Wiltshire on Facebook, X and Instagram. Send your story ideas to us on email or via WhatsApp on 0800 313 4630.