Toronto cops report fake QR codes on parking meters

Bike Share Toronto has also reported fake QR codes but police have not received reports

Published Apr 30, 2026  •  Last updated 5 minutes ago  •  2 minute read

Green P parking ticket dispenser is moved across King St. W. in Toronto on November 9, 2017. Photo by Ernest Doroszuk /Toronto Sun

Toronto parking meter payers — and maybe bike sharers — beware.

Article content

A spokesperson for Toronto Police says they’ve received three reports in the last week about fake QR codes on parking meters.

Article content

Article content

“The individual thinks they’re paying for street parking,” explained Const. Shannon Eames in an email.

“Scans a QR code, they are directed to what appears to be a legitimate website, make a payment, and instead of being charged $7 they’re charged almost $2,000.”

BikeShareTO also posted on X this week: “We’ve become aware of fraudulent QR codes being placed over the official QR codes on some of our bikes.”

Eames, however, said Toronto Police were unaware the same scam had spread to bike shares.

“We reached out to our financial crimes team,” she told the Toronto Sun on Thursday.

“They’re not aware of any reports around bike shares, however, we have at least three reports for fake QR codes being placed on parking metres in the last few weeks.

“Needless to say, the same thing could be happening with bike shares.”

Here’s how to take precautions

Toronto Police say there are several precautions people should make to protect themselves including:

Article content

Article content

– Inspect the code physically.

– Look for stickers placed over original QR codes, peeling edges, mismatched branding, or anything recently tampered with.

– Avoid scanning in high-risk contexts.

– Be cautious with QR codes on parking meters, public posters, unsolicited mail, or anywhere payment is requested.

– Preview the URL before opening.

– Most phones show the destination link. Check for misspellings, odd domains, or slight variations of legitimate sites.

– Do not enter sensitive information.

– Never input banking credentials, credit card numbers, or personal data after scanning unless you independently trust the destination.

– Use official apps or direct navigation.

– Instead of scanning, open the legitimate website or app manually. This removes the attacker’s entry point.

– Avoid downloading apps via QR codes

– Install apps only through trusted app stores like Apple App Store or Google Play Store.

– Be wary of urgency or incentives: “Pay now,” “limited time,” or “claim reward” messaging is a common social engineering tactic to override caution.

Article content

– Check payment flows carefully.

– If a QR code leads to payment, confirm the payee name and details before authorizing anything.

– Use security features on your device.

– Keep your phone updated and consider mobile security tools that flag malicious links.

– Report suspicious QR codes.

– Notify the business, property owner, or local authorities if you encounter a tampered or fraudulent code.

– When in doubt, don’t scan.

– Treat QR codes like unknown links. If you would not click it, do not scan it.

Meanwhile, BikeShareTo says:

– Bike Share Toronto will never ask for payment through a QR code.

– Always unlock bikes using the Bike Share Toronto app.

– Only scan QR codes using the in‑app scanner, not your phone camera.

– If a QR code looks suspicious or unfamiliar, don’t scan it. Report it to customer service immediately so it can be removed quickly.

[email protected]

Article content