What it means
A QR overlay is a sticker placed over a legitimate code to redirect a scan to someone else's website. On a parking meter, the fake page can collect card details while leaving the driver with no valid parking payment.
A real-world example
You scan a code that looks like it belongs to the meter, but the preview domain does not match the parking operator's known website. The meter's location is not proof that the sticker was placed by its owner.
What to do
Inspect the code and URL preview, then use the operator's verified app, card reader or independently typed website. Report suspected tampering to the operator.
The distinction that matters
HTTPS only protects the connection to whichever site you opened; it does not prove the site is the parking operator. If card details were submitted, contact the issuer and confirm a valid parking session separately. FTC has documented QR stickers covering legitimate parking codes.
FTC's parking-meter QR alert
