1. Fake QR codes on parking meters
Scammers paste counterfeit 'PHONE PAY' QR stickers onto parking machines; scanning opens a fraudulent web form mimicking the city's payment site and steals your credit-card number. SFMTA crews found at least five such machines at Fisherman's Wharf in one sweep, after earlier incidents near the Embarcadero and Beale Street — and the agency stresses that San Francisco parking meters never use QR codes. Fraudulent parking tickets mimicking real SFMTA citations have also circulated.
Warning signs
- A QR sticker on or near the meter — SF meters never use QR codes
- A payment page that isn't the official PayByPhone domain
- A 'ticket' on your windshield demanding online payment to an odd URL
- No session visible in the official app after 'paying'
How to avoid it
- Never scan a QR code to pay for SF parking
- Pay at the meter itself or through the official PayByPhone app or phone line
- Verify any citation on the SFMTA website before paying it
- Report tampered meters to SFMTA
Sources
2. Fake parking-lot attendants
Impostors position themselves at pay-and-display lots around Fisherman's Wharf and tourist areas, collect cash 'fees' from arriving drivers as if they were attendants, then pocket the money — leaving the driver unpaid and sometimes ticketed or towed. The con is long-running in San Francisco: one repeat offender drew a 16-month prison sentence after being caught scamming tourists in the same lot twice in a single day, and the Wharf was hit by attendant impersonators as far back as 2007.
Warning signs
- A person in an unofficial vest collecting cash at a lot entrance
- No printed receipt from a machine or official operator
- Cash-only demands and pressure to pay before you read the signage
- The 'attendant' can't name the lot's operating company
How to avoid it
- Pay only at the lot's machine, kiosk or official app — not to a person
- Read the posted instructions and rates yourself before handing over anything
- Use staffed, enclosed garages in tourist areas
- Keep the machine receipt displayed as instructed
Sources
3. Tourist-area car break-ins ('bipping')
Crews cruise blocks around Fisherman's Wharf, North Beach, Lombard Street and the crooked-street parking areas, smash windows and grab anything visible — luggage, day packs, even charging cables — in seconds. Police data analyzed by the San Francisco Standard put North Beach/Fisherman's Wharf at the top of the city's break-in rankings, with thefts from vehicles numbering in the thousands a year; rental cars and vehicles with visible bags are prime targets.
Warning signs
- Broken glass sprinkled along a curb — a sign the block is hunted
- Open-air lots near major tourist sights
- People on scooters or in cruising cars watching vehicles
- Any bag left visible in your own car
How to avoid it
- Leave absolutely nothing visible in the car — not even for minutes
- Drop luggage at your hotel before sightseeing
- Use enclosed, attended garages instead of street parking or open lots
- Photograph the empty cabin and lock the trunk release
Sources
4. Alcatraz ticket scalpers and fake resellers
When official Alcatraz tickets sell out — as they routinely do weeks ahead — scalpers and lookalike websites step in, selling 'tickets' at inflated prices that may be invalid, since Alcatraz City Cruises is the only ferry concessioner authorized by the National Park Service and requires photo ID matching the purchaser. The official operator warns that tickets bought from individuals approaching visitors are often scalped and may not be honored, and third-party sites frequently sell expensive 'packages' that don't include actual island access.
Warning signs
- Street sellers near Pier 33 claiming to have last-minute tickets
- Websites selling 'Alcatraz tickets' at large markups without naming City Cruises
- No mention of the ID-matching requirement
- Packages that bundle the ferry with unrelated tours to disguise the markup
How to avoid it
- Book only at cityexperiences.com/alcatraz-city-cruises, weeks ahead
- If sold out, check the official site's same-day/last-chance options at Pier 33
- Bring photo ID matching the booking name
- Treat any 'guaranteed Alcatraz ticket' from a reseller as suspect
Practical safety briefing
- Airport arrival: From SFO, BART runs directly from the International Terminal to downtown and is the scam-proof option; official taxis queue at marked stands on the arrivals level and Uber/Lyft use designated pickup zones — ignore anyone soliciting rides at the curb.
- Trusted transport: BART and Muni (via the MuniMobile app or Clipper card), cable cars with official tickets from machines or the app, Uber/Lyft, and licensed taxis from stands. If driving, use attended garages only.
- Money & payments: Cards and contactless payment are accepted nearly everywhere, including cable cars via the app. Pay parking only at meters or the official PayByPhone app, and use bank ATMs over tourist-area machines.
Official travel advisories
- San Francisco Municipal Transportation Agency (via SFGATE) — SFMTA confirms city parking meters never use QR codes and lists the only legitimate payment channels (meter, PayByPhone app/website, or official phone line).
- Alcatraz City Cruises (official NPS ferry concessioner) — Official operator warning that tickets bought from individuals approaching visitors are often scalped, may be invalid, and that ID must match the purchaser.
Compiled from documented reports and government advisories. How we verify scams. Last verified July 2026.