Red flags:

• Sticker on top of a sticker. Look for lifted edges or misalignment — scammers literally paste over the real code.
• Check the URL before tapping. Modern phones preview the URL before opening — read it!
• Suspicious domain. Real Q-Park is q-park.nl, not q-park-paynow.info.
• Unexpected payment flow. Real parking apps (Yellowbrick, EasyPark, Q-Park app) know who you are — random sites don't.