EV Charging Station QR Code Scams: How to Spot a Fake Sticker

Why a sticker on a charger is a problem

The EV charging station QR code scam works by covering the real payment code with a fake one. Scan the fake, and you land on a lookalike payment page built to collect your card details. Skip the sticker and pay through the operator's own app or a card reader, and the trick has nothing to work with.

Security researchers call this quishing, short for QR phishing. Chargers make a good target: many drivers rely on a code to start a session and pay. Below, how the scam works, where it has been reported, and what to check before you pay.

How the sticker scam works

A scammer prints a QR code and sticks it over the genuine one on a charger. The FTC describes the same approach on parking meters, where scammers place their own QR codes over the real ones. We covered the same trick on parking meters in a separate guide.

When you scan the sticker, it leads to a counterfeit payment site that closely imitates the real one. Enter your card or bank details and they can be stolen.

Why it can look legitimate

Some versions are built to lower your guard. BioEnergy Times reports that on a second payment attempt, some users are sent to the genuine payment page, so the session appears to work. Connexion France notes that in some versions the scammers cap the amount they take to seem legitimate, but may take more later.

Where it has been reported

It isn't a one-country problem.

• London, April 2024. The Camden New Journal reported fake stickers over the payment information on lamppost chargers. A driver scanned the code, reached an unfamiliar website, then peeled back the sticker to find the real details. The fake site did not yet accept bank details, and Camden Council said earlier codes linked to inactive sites with no customer details compromised.
• Loiret, France, January 2024. Connexion France reported fake stickers on chargers. In the town of Lorris, the affected terminal was deactivated after the report.
• Across Europe. BioEnergy Times (March 2026) lists reports from Germany, Belgium, the Netherlands, France, Spain and Italy. In Berlin, one company found fewer than 30 charging points with fake stickers and reported no financial losses.

Warning signs on the charger

You can often tell before you scan. Look for:

1. A raised or peeling code. A genuine code is part of the original signage. If a corner lifts, it is a sticker.
2. Mismatched print. Compare the colours, fonts and print quality of the code with the rest of the panel.
3. A second sticker or an odd sign. Camden's council advises watching for additional stickers or signs at charging points.

If you do scan, read the address before you do anything else. The FTC's advice is to inspect the URL before you open it, looking for misspellings or swapped letters. Connexion France adds: look for https and a padlock, and be wary of poor quality pages or stretched logos. A padlock alone doesn't prove a site is the operator's, so compare the full address with the one you know.

Pay without trusting the sticker

Safer options exist:

• Use the operator's app, or type its address yourself. This is the most commonly recommended step, because a sticker never decides where your payment goes.
• Use a card reader if the charger has one.
• Call the freephone number printed on the charging point if something looks wrong, as Camden advises.
• Ignore stickers that were added to the post. Authorities advise relying only on official payment systems from the operator.

If you scan codes often, use a scanner that shows the destination before opening it. QRDock's free scanner checks a link before you tap through. It can't catch every fake, so treat it as one layer. Our guide on whether it is safe to scan a QR code covers the wider checklist.

What operators can change

BioEnergy Times recommends that operators show secure payment codes on built-in screens instead of removable stickers, since criminals can swap stickers but not a screen. Another approach is proving a code is authentic, which we explain in digitally signed QR codes.

If you already paid

Call your card issuer or bank right away and review recent charges, including recurring ones. Report the sticker to the charger operator and local authorities. In France, victims can report through THESEE on Service-public.fr.

The takeaway

Treat a QR sticker on a charger like any link from a stranger. Check that it belongs to the sign, read the address, and pay through a channel you chose yourself.

Frequently Asked Questions

How do I know if a QR code on an EV charger is fake?

Look for a code that sits raised on top of the sign, peels at the edges, or differs in print quality, colour or font from the rest of the panel. If you can lift a corner, it is a sticker. When in doubt, skip the code.

Can I just use the charging operator's app instead?

Yes, and it is the most commonly recommended option. Open the operator's app or type its address yourself, so a sticker never decides where your payment goes.

What should I do if I already entered my card details?

Call your card issuer or bank right away, review recent charges including recurring ones, and report the sticker to the charger operator and local authorities.