Scammers use QR codes on fake traffic tickets to steal data

Traffic violation scams are evolving to use QR codes embedded in fake notices, with criminals swapping away from text links in favour of images that look official. Victims are instructed to scan a QR code to pay a small fine, but the code redirects to an intermediary site with a CAPTCHA before leading to a phishing page impersonating a state agency such as the Department of Motor Vehicles.

The aim is to harvest names, addresses, phone numbers, emails and credit card details at the payment stage, enabling identity theft and card fraud. The tactic relies on urgency and authority to bypass scrutiny, and the use of QR codes adds an extra layer of obfuscation by pushing victims toward image-based content rather than obvious text links.

The FBI’s 2025 IC3 Annual Report indicates scam operations are a major issue, with IC3 receiving over a million complaints in 2025 and reported losses topping $20.8 billion. April 7, 2026.