That Traffic Violation Text With a QR Code? It's a Scam.
TL;DR
- The FTC flagged a scam in April 2026 where texts impersonate state courts with a QR code to “pay your traffic fine now.”
- QR codes sidestep the “don’t tap suspicious links” reflex, since there’s no URL visible in the message to inspect.
- Scanning leads to a fake CAPTCHA, then a fake DMV page asking for a small fee (typically around $6.99) and full payment details. Your card info is the real target.
- Reported in at least eight states including New York, California, Texas, Illinois, Virginia, North Carolina, Connecticut, and New Jersey.
- Real courts don’t send QR codes for fines. If you’re worried, look up the court’s website yourself and call the number listed there.
If you’ve gotten a text recently telling you that you have an outstanding traffic violation — complete with a case number, a hearing date, and a QR code to “pay the fine now” — you’re not alone. The FTC flagged this scam in April 2026 after a spike in reports, and it’s hitting phones across the country.
The twist with this one is the QR code. Scammers have figured out that most people have learned not to tap suspicious links in text messages. So they switched tactics. Instead of a link, you get an image with an embedded QR code. Same scam, new delivery method — and one that sidesteps the usual red flags people are trained to look for.
How the Traffic Violation Text Scam Works
The text shows up looking surprisingly official. It might include a state seal, a case number, and a date for your supposed court hearing. The message gives you two options: show up to the hearing, or pay the fine now by scanning the QR code. Then it lists a bunch of consequences if you ignore it — default judgments, additional fines, enforcement actions.
It’s all fake. Every part of it.
If you scan the QR code, you’ll land on a page that looks like a CAPTCHA verification step — the kind you’d see on any legitimate website. That’s intentional. Security researchers at Bleeping Computer found that the CAPTCHA layer serves a dual purpose: it makes the scam feel more legitimate to victims, and it makes it harder for automated security tools to crawl and flag the phishing page.
After the CAPTCHA, you’re redirected to a fake DMV or state agency website. It looks real. It asks you to pay a small fine — typically around $6.99 — and enter your payment details. Name, address, card number. That’s what the scammers are after. Not the $6.99. Your financial information.
These campaigns are targeting residents across multiple states including New York, California, Texas, Illinois, Virginia, North Carolina, Connecticut, and New Jersey. If you live anywhere near a toll road or in a state that issues traffic citations, you’re a potential target.
Why QR Codes Make This Scam Harder to Spot
For years, the standard advice has been “don’t tap links in text messages from unknown senders.” iPhones even strip clickable links from messages flagged as potential spam. That’s good advice, and it works — for link-based phishing.
QR codes dodge that entirely. There’s no URL visible in the text for you to inspect. There’s no link for Apple’s spam filters to analyze. You see an image, you scan it with your camera, and you’re on the phishing site before you’ve had a chance to think about whether the domain looks legitimate.
This is the same evolution we saw with toll road text scams that flooded phones earlier this year. Scammers adapt when their old methods stop working. QR codes are the adaptation.
How to Protect Yourself
If you get a text about a traffic violation, here’s what to do:
Don’t scan the QR code. Don’t respond to the text. Don’t interact with it at all.
Verify independently. If you’re genuinely worried you might have an outstanding violation, go directly to your state’s court or DMV website — type the URL yourself or find it through a search engine. Call the court using a number you find on the official website, not from the text. Real courts don’t send QR codes via text message to collect fines.
Report it. Forward the text to 7726 (SPAM) so your carrier can flag the number. You can also file a report at ReportFraud.ftc.gov.
Block the sender. On iPhone, open the message, tap the sender’s number at the top, and select Block this Caller. That handles the one number, but scammers rotate through numbers constantly. If you’re getting hit with texts from multiple numbers using similar language, keyword-based filtering catches what number-by-number blocking can’t. Not Today lets you set up keyword rules — block any text containing phrases like “traffic violation,” “scan to pay,” or “case number” — so new numbers running the same script get caught automatically.
The Bigger Picture: Text Scams Are Getting Smarter
This QR code trick is part of a broader trend. Smishing — phishing via SMS — has surged to 39% of all mobile threats in 2026, with a 40% year-over-year increase in SMS-originated scams. Scammers aren’t just sending more texts; they’re sending better ones. AI-generated messages, personalized details pulled from data breaches, and now QR codes that bypass the defenses people have been taught to rely on.
The traffic violation scam is effective because it hits a nerve. Nobody wants to deal with a court hearing or a default judgment. The urgency is manufactured, but the anxiety it creates is real. That’s the whole point — get you to act before you think.
Take a breath. Real government agencies give you time. They send paper mail. They don’t text you QR codes with 48-hour deadlines. If something feels urgent and comes from an unknown number, that urgency itself is the red flag.
Not Today is a free spam-blocking app for iPhone. We built it to catch spam before it reaches you, using keyword rules, a community database of 85,000+ reported numbers, and optional AI detection. No account required. Download on the App Store.