A QR code is just a web address you can't read, which is exactly why scammers like them. Fake stickers on parking meters and posters send people to lookalike payment pages.
Before opening a scanned link, read the address your phone shows. If it doesn't match the business, close it.
Be extra careful with codes on stickers, flyers and posters promising free things.
When paying, use the meter itself or the real app you downloaded from your app store.
The rule from the episode: peek before you scan.
The rule: Peek before you scan.
Phishmael & Friends