June 1, 2026
QR Code Tampering: How to Detect & Prevent Sticker Scams
QR code tampering is one of the most common physical QR security threats. Attackers place their own QR code sticker over a legitimate one, redirecting users to malicious sites.
This guide covers how to detect and prevent QR code tampering.
How QR Code Tampering Works
The Sticker Method
- Attacker prints their malicious QR code on a sticker
- Places sticker directly over the legitimate QR code
- Victim scans the attacker's code instead of the business's code
- Victim is directed to a phishing site or fake payment page
Why It Works
- QR codes are small and often printed on paper
- A sticker of the same size looks similar
- Most people don't inspect QR codes before scanning
- Busy environments (parking lots, transit) reduce scrutiny
Where QR Tampering Happens
| Location | Risk Level | Why |
|---|---|---|
| Parking meters | High | Unattended, payment-related |
| Public transit | High | High traffic, low supervision |
| Vending machines | High | Unattended, payment-related |
| Street signage | High | Outdoor, hard to monitor |
| Restaurant tables | Medium | Attended but busy |
| Retail stores | Medium | Staff should monitor |
| Parking garages | High | Dim lighting, unattended |
How to Detect Tampering
Visual Inspection
| Sign of Tampering | What to Look For |
|---|---|
| Raised edges | Sticker edge is slightly raised |
| Different color | Sticker paper differs from original |
| Misalignment | Sticker not perfectly aligned with printed area |
| Air bubbles | Bubbles indicate a recent sticker application |
| Double layer | Corner of sticker may be peeling, showing original below |
| Different size | Sticker slightly larger or smaller than printed area |
| Gloss difference | Sticker finish (glossy vs matte) differs from original |
Physical Inspection
- Gently run finger over the QR code area
- Check for raised edges or uneven surface
- Try to lift a corner to check for double layers
- Compare with nearby QR codes from the same business
Preventing QR Code Tampering
For Businesses
| Prevention Method | Cost | Effectiveness |
|---|---|---|
| Use tamper-evident stickers | Low | High |
| Print QR codes directly on signage | Medium | Very high |
| Use acrylic or metal signs | Medium | Very high |
| Use digital displays instead of print | High | Highest |
| Inspect QR codes daily | Low | High |
| Place QR codes in attended areas | Low | Medium |
Tamper-Evident QR Code Signs
- Acrylic signs (hard to place a sticker)
- Metal signs (durable, tamper-resistant)
- Signs with cut-out QR code (QR is recessed)
- Direct printing (not a sticker applied later)
For Consumers
| Protection | How |
|---|---|
| Inspect before scanning | Check for sticker edges |
| Prefer official apps | Use brand's app instead of scanning QR code |
| Check payee name | Payment apps show the recipient name |
| Report tampering | Alert staff or authorities |
What to Do If You Find Tampered QR Codes
For Businesses
- Remove the tampered sticker immediately
- Replace with a tamper-resistant sign
- Alert nearby businesses
- Report to local police
- Check payment records for fraudulent transactions
- Notify customers if payment data may have been compromised
For Consumers
- Do NOT scan the QR code
- Notify the business owner or staff
- Take a photo of the tampered code
- Report to local authorities
Case Study: Tampered Vending Machine
Attackers placed fake QR code stickers on 50 vending machines across a city.
The tampering: Each vending machine had a QR code for "mobile payments." Attackers placed their own stickers over the legitimate codes.
Detection: A customer noticed the sticker was slightly misaligned and lifted a corner, revealing the original code underneath. They alerted the vending machine company.
Impact: Estimated 200+ customers scanned the fake code before detection. No financial losses reported because payment apps showed an unfamiliar recipient name.
Creating Tamper-Resistant QR Codes
Create secure QR codes — generate QR codes with security best practices for physical placement.
Conclusion
QR code tampering is a physical security threat that requires physical solutions. Tamper-evident materials, regular inspections, and digital displays are the best defenses.
Create tamper-resistant QR codes — design QR code signage that resists tampering and keeps your customers safe.