Some train parking lot systems would be vulnerable to this too. I've parked in lots where you enter the parking spot number and payment into a website. There

Some train parking lot systems would be vulnerable to this too. I've parked in lots where you enter the parking spot number and payment into a website. There is no physical confirmation, and it would be trivial to put a QR code on the parking information sign. Especially because typically people are walking into the station while paying, and not standing in front of the sign double checking the details. Insult to injury, the UI on the legit system is so bad and slow that scammers wouldn't even need to try to replicate what exists. Basically anything else would be an improvement.