A QR code parking tag is reasonably safe for your privacy if the page it opens shows only Call and Message buttons, with no name, address or workplace. The catch is that anyone who calls you will see your number, and anyone with a photo of the tag can usually extract it. If that’s not acceptable, you need a tag that routes calls through a relay.
Most worries about QR codes on cars mix up two different risks. One is what the tag reveals about you. The other is someone tampering with the tag to trick other people.
What a QR code parking tag reveals about you
A QR code parking tag reveals exactly what its page shows, plus your phone number to anyone who calls. Everything else depends on what you choose to put on the page.
What each field gives a stranger standing next to your car:
| Field on the tag page | What a stranger learns | Keep it? |
|---|---|---|
| Call button | Your number, once they call | Yes, that’s the point of the tag |
| WhatsApp button | Your number, plus whatever your WhatsApp profile shows publicly | Check your WhatsApp privacy settings first |
| Your full name | Who owns this car, searchable online | Use a first name or “Owner” |
| Plate or car model | Nothing new, they can already see it | Fine |
| Address, flat number or workplace | Where you live or work and when you’re away | No |
| Social links | Your photos, contacts and routine | No |
A tag needs a way to reach you and nothing more. The free Car QR Contact tool puts it well: “Treat your QR like a business card and share it where you’re comfortable being reached.”
Is the phone number on a parking tag really hidden?
The phone number on most QR parking tags is hidden from the screen but not from the caller. A tap-to-call button has to dial your real number, so the call shows up on their phone like any other.
Car QR Contact says this outright in its FAQ: masking hides the number on screen, but “the full number is embedded in the QR so the call can connect.” Someone who photographs the tag can decode it at home.
That isn’t a flaw in one tool. It’s how direct calling works. The only workaround is a relay or masked-calling service, where a middle number sits between you and the caller. That adds an app, usually a subscription, and another company holding your number.
Your plate is protected, your tag page is not
In the US, your plate doesn’t hand a stranger your name and address. Under 18 U.S.C. § 2721, a state DMV “shall not knowingly disclose or otherwise make available” personal information from a motor vehicle record, except for uses the law lists.
A QR parking tag sits outside that protection. Whatever you type into the tag page is public to anyone with a phone camera. The rule for the page is stricter than people expect: don’t add anything the DMV wouldn’t give out. That means no surname if you can avoid it, no address, and no parking notes that tell someone which building you live in.
The tampering risk: a fake code over your tag
The bigger safety risk with a QR parking tag is to the people who scan it, not to you. Someone can stick their own code over yours and send scanners to a fake page.
This already happens with parking. The FTC has warned that some criminals cover the QR codes on parking meters with a code of their own, and that “a scammer’s QR code could take you to a spoofed site that looks real but isn’t” (CNBC on the FTC alert).
Three habits make your tag hard to fake:
- Mount it inside the glass, facing out, so nobody can stick anything over it without opening your car.
- Print the short link under the code. The FTC advises checking a URL for misspellings or a switched letter, and a visible link lets scanners do that.
- Keep the page boring. A real tag page asks for nothing. If a scanner ever sees a login or payment form, they’ll know it isn’t yours.
How QRCard handles parking tag privacy
QRCard vehicle cards let you set each field on the page to shown, button-only, or hidden, for phone, email and location. With the phone set to button-only, a scanner sees a Call button and no digits on the page.
QRCard is not a relay: when someone calls, they see your number. If you need full anonymity, for example after a stalking or harassment case, use a masked-calling service instead.
QRCard also gives you scan analytics with a geographic breakdown, so you can tell whether your tag is being scanned far more than expected. And because the tag is a live page, you can change or unpublish it without peeling off the sticker. Our guide to updating a digital card after printing covers how that works.
Is a QR parking tag safer than a note with your number?
A QR parking tag is safer than a dashboard card with your number written on it, as long as the page is kept minimal. My take: a button-only tag is the right trade.
A written number is readable by everyone walking past, forever, and you can’t take it back. A tag page can be edited, hidden, or pointed somewhere else in a minute. The direct number still leaks to callers, but callers are usually the people you want to hear from: the neighbour you’ve blocked in, or someone telling you your lights are on.
If you haven’t set one up yet, our step-by-step guide on putting a QR code on your car covers placement and printing.
What to do if your tag brings unwanted calls
If a QR parking tag starts bringing spam or harassing calls, block the numbers, filter the rest, and change the page. Most phones can do the first two already.
- Block the caller. The FTC notes that many phones can block specific numbers, “though there might be a limit to how many numbers you can block.”
- Turn on filtering. Call-blocking apps act like a filter; some are free and others charge a fee. Some carriers also label calls as “spam” or “scam likely.”
- Unpublish or edit the tag page so the Call button stops working until you’re ready.
- Report it. The FTC points people to DoNotCall.gov for unwanted calls, and to ReportFraud.ftc.gov if they lost money.
Don’t count on the Do Not Call list here. As the FTC puts it, “Scammers don’t care if you’re on the National Do Not Call Registry.” For more on keeping a number semi-private on cards in general, see how to share your phone number on a digital business card.
FAQ
Can someone find my address from my parking tag?
Only if the tag page shows it or links to something that does. In the US, a state DMV can’t release personal information from your vehicle record except for uses the law allows, so keep your address off the tag page too.
Does a QR parking tag hide my phone number?
It hides the number from the screen, not from the person who calls you. When they tap Call, your number connects like any other call. Only a relay or masked-calling service keeps the number from the caller.
Can someone replace my QR tag with a fake one?
Yes. The FTC has reported criminals covering parking meter QR codes with their own. Put your tag inside the glass and print the short link under it so people can check where it goes.
What should I do if my tag brings unwanted calls?
Block the number on your phone, turn on carrier call labeling, and unpublish or change the tag page. The FTC lists DoNotCall.gov for reporting unwanted calls.