Whenever someone scanned the code, a fake website popped up that looked like a parking payment portal. At least one person inputted their credit card information.