Short answer
Place codes behind protective covers where possible, print your official domain and a human-readable code next to them, use a verification step customers can recognise, inspect public codes regularly, and monitor scans so you are alerted when a code suddenly stops being used.
Prevent
- Protect the surface. Codes behind acrylic, glass or a raised frame are much harder to cover neatly.
- Use tamper-evident materials. Void or destructible labels show when something has been peeled or stuck on.
- Print context. Next to the code, print the domain customers should land on ("Pay only at cityparking.gov") and the human-readable code.
- Avoid collecting payment through unattended codes when an app or card terminal is available.
Make genuine codes recognisable
Customers can only spot a fake if they know what genuine looks like. Kizmo's optional verified check screen shows your business name, the code's placement and the destination domain before continuing, and every Kizmo code has a public verify page.
Detect
A sticker over your code does not just steal customers. It also silences your code. That is measurable. Kizmo tamper alerts learn each code's normal scans per weekday and alert you when a normally busy code records none, naming the exact placement: "Table 7" or "Meter 12, Elm St".
Respond
- Check the location in person and remove any overlay.
- Tell affected customers and your payment provider if payments may have been diverted.
- Report the incident to your local police fraud unit.
- Review placements that were targeted and add protective covers.