Drivers who scanned a QR code to pay for parking in Redondo Beach may have handed their credit card numbers directly to scammers.
Roughly 150 parking meters along the Esplanade and in Riviera Village were found with fraudulent QR code stickers glued next to the legitimate ParkMobile and PayByPhone logos, according to a Patch newsletter report published Sunday, Aug. 2. The stickers directed unsuspecting drivers to a lookalike website called "poybyphone," one letter swapped from the real PayByPhone, where they were prompted to enter payment information.
The stickers have since been removed. The Redondo Beach Police Department has not released a public statement detailing how many drivers were victimized or whether suspects have been identified. The South Bay Tide has contacted RBPD for comment and will update this story with any response.
How the scam worked
The FBI calls the technique "quishing," short for QR code phishing. It requires no hacking or malware. Criminals print a fake code, stick it over or beside a real one, and wait. Because the fraudulent sticker sat close enough to the official logos to blend in, most drivers scanned without a second look.
Victims face a double hit: their card information goes to criminals, and they may also receive a legitimate parking ticket because the real meter was never paid.
One account circulating on social media described a driver who entered his card number on the fake site. Within minutes, his wife's credit card company called about unauthorized charges.
What drivers should do now
According to cybersecurity guidance from CyberCalmHome, anyone who may have scanned a suspicious code at a Redondo Beach meter should take three steps:
- Contact your bank immediately using the number on the back of your card. Report the transaction and request a new card number.
- Monitor recent statements for unfamiliar charges.
- File a report with the Redondo Beach Police Department at (310) 379-5411.
Going forward, drivers should open the ParkMobile app directly rather than scanning any QR code on a meter. If you do scan, check the URL carefully before entering any information. A single swapped letter is the giveaway.
A growing national problem
The scam is not unique to Redondo Beach. Similar fake QR code attacks have been reported in Atlanta, Las Vegas, New York, and Los Angeles. New York City's Department of Transportation issued a formal advisory in June 2025 after fraudulent stickers appeared on ParkNYC meters. A 2025 report cited by cybersecurity vendor Lunar Defense estimated victims lost an average of $1,225 each nationwide.
The Redondo Beach Police Department has not announced a next public update on the matter. Residents who spot a suspicious sticker on any city meter can call RBPD's non-emergency line at (310) 379-5411.
