QR Codes on EV Chargers: AFIR Rules, Ad-Hoc Payments, and How to Stop Charging Scams

Introduction

Anyone who has driven an electric car across Europe knows the frustration: one app for this network, a card for that one, a subscription for another. The EU’s Alternative Fuels Infrastructure Regulation (AFIR), which has applied since April 13, 2024, set out to fix that by requiring ad-hoc payment at public chargers, meaning any driver can charge and pay without a contract or a specific app.

QR codes have become one of the most common ways to deliver that ad-hoc payment, especially on AC chargers. They have also become a target: fake QR stickers on charging stations, directing drivers to fraudulent payment pages, have been reported in several countries.

With the next AFIR milestone approaching on January 1, 2027, here is what charge point operators, businesses hosting chargers, and drivers need to know.

What AFIR Requires

AFIR sets several rules for publicly accessible charging points. The key ones for payment are:

New Chargers of 50 kW or More

Since April 2024, newly installed fast chargers of 50 kW or more must accept payment cards through a card reader or a contactless device.

New Chargers Below 50 kW

For newly installed chargers below 50 kW, operators can choose between a card reader, a contactless device, or a device using an internet connection, which in practice often means a QR code that opens a secure payment page.

Existing Fast Chargers: January 1, 2027

Existing publicly accessible chargers of 50 kW or more on the main trans-European transport network corridors must be retrofitted with card payment by January 1, 2027.

Price Transparency

The ad-hoc price must be clearly displayed before the charging session starts, so drivers know what they will pay.

Always check the full text of the regulation and national guidance for the exact rules that apply to your chargers.

How QR Payment at a Charger Works

1. The driver plugs in and scans the QR code on the charger or its screen.
2. A payment page opens, identifying the specific charge point and connector.
3. The driver sees the price, pays by card or wallet, and starts the session.
4. A receipt arrives by email or on screen.

No app download, no account, no subscription. That is exactly the experience AFIR is aiming for.

The Scam Problem: Fake QR Codes on Chargers

Chargers are ideal targets for QR fraud. They are often unattended, located in car parks, and used by people in a hurry. The typical scam:

• A criminal places a sticker with their own QR code over the real one
• The driver scans, lands on a convincing payment page, and enters card details
• The charger never starts, or the driver is charged by both the fraudster and the operator

For more on how QR fraud works, see our quishing 2026 guide.

Best Practices for Charge Point Operators

Prefer Dynamic On-Screen Codes Where Possible

On chargers with a display, a QR code generated on screen for each session is much harder to fake than a printed sticker.

Make Printed Codes Tamper-Resistant

For chargers without screens, print or engrave the code directly on the housing, use tamper-evident labels, or place the code behind a protective cover. Avoid simple adhesive stickers that can be covered easily.

Use One Unique Code per Charge Point

Each code should identify the exact station and connector, for example:

https://pay.yourcpo.com/c/ES-MAD-0412-2

That makes support easier and lets drivers confirm that the page matches the charger in front of them. For operators with hundreds or thousands of connectors, generating these codes one by one is not realistic. With a bulk QR code generator like MultipleQR, you can turn your list of charge point URLs into print-ready codes in a single batch and download them in one ZIP, ready for your label supplier.

Use Your Own Domain and Show It

Print the domain next to the code (“Pay at pay.yourcpo.com”) so drivers can check it after scanning.

Show the Charge Point ID on the Payment Page

The payment page should display the station and connector ID printed on the charger. If they do not match, the driver knows something is wrong.

Inspect Regularly

Include QR code checks in maintenance routines and make it easy for drivers to report suspicious stickers.

Best Practices for Businesses Hosting Chargers

Hotels, supermarkets, car parks, offices, and restaurants increasingly host public chargers:

• Ask your operator how payment works and whether the QR code is on screen or printed
• Have staff check the chargers for extra stickers during routine rounds
• Add a clear sign explaining how to pay and who to contact for help
• Link your own information, such as opening hours or Wi-Fi, from a separate, clearly labeled code, never next to the payment code

Tips for Drivers

• Look before you scan: check for stickers placed over the original code or signs of tampering
• Check the domain in the preview before opening it
• Confirm the charge point ID on the payment page matches the charger
• Prefer contactless card payment when the charger offers it
• Use the operator’s official app if you already have it
• Report suspicious codes to the operator

Conclusion

AFIR is making public charging simpler, and QR codes are an important part of the ad-hoc payment toolkit, especially for lower-power chargers. But a QR code on an unattended charger is also an invitation to fraud if it is not designed and maintained carefully.

For operators, the recipe is clear: unique codes per connector, tamper-resistant printing, your own domain, and regular inspections. When you need to generate codes for your whole network, MultipleQR lets you create them all at once from a list and download them free in a single ZIP.