Manhattan Man Indicted for QR Code Parking Scam
Prosecutors charged a man with targeting 64 parking kiosks in Manhattan with fake payment stickers.
Updated on Oct. 6, 2026 in Financial Crime
Live Poll
Do you feel comfortable using QR codes to pay for services at public kiosks?
Mahai Theodore Enescu was indicted and arraigned for placing fraudulent QR code stickers on city parking kiosks. The stickers directed drivers to a sham website designed to harvest credit card information.
Why it matters
The case highlights the growing threat of digital fraud targeting public infrastructure. This incident underscores the risks associated with scanning physical QR codes in public spaces to make payments.
Mahai Theodore Enescu has been officially indicted and arraigned for his alleged involvement in the parking kiosk fraud. The investigation remains active as authorities review evidence related to the 64 tampered machines.
The players
Mahai Theodore Enescu
The individual indicted and arraigned for allegedly orchestrating the fraudulent QR code sticker scheme.
The details
The scheme involved placing stickers labeled "web pay scan to pay" directly over official ParkNYC payment instructions. One user reported the suspicious code near 79 East 10th Street in June 2025, which alerted banks and prevented any actual financial loss for that individual.
Timeline
June 2025: Authorities were alerted to the QR code scheme after a resident reported a suspicious sticker.
Legal Context
This case follows the pattern set by the rise of quishing attacks where criminals use deceptive QR codes to bypass traditional physical security. Prosecutors are increasingly adapting criminal codes to address digital fraud integrated into public infrastructure.
Residents should remain vigilant when using public payment portals and avoid scanning any QR codes placed over official signage. If a payment sticker appears to be an addition to existing hardware, users are encouraged to use official mobile apps or physical payment methods instead.
The takeaway
Always verify that payment stickers are part of the original machine design before scanning them with your phone. If a QR code directs you to a website requesting credit card information, exit the site immediately and report the kiosk to local authorities.
Further reading
For more on evolving fraud trends, see Financial Crime.
Source note: This article includes information reported by The Cool Down.
Live Poll
Do you feel comfortable using QR codes to pay for services at public kiosks?
