Do not trust a Pokémon slab's QR code by itself; type the grading company's official address and look up the certification number independently. A fake verification page is a lookalike website designed to validate a counterfeit slab, collect personal information, or steal login and payment details. A slab is the sealed plastic holder used for a professionally graded card. No evidence supplied here establishes a widespread Pokémon slab phishing campaign, but altered labels and copied QR codes create a credible risk collectors can address with simple checks.
Table of Contents
- How a slab QR-code scam can work
- Warning signs on the linked page
- Verify the slab without using its QR code
- Checks to make before buying
- What to do after opening a suspicious page
How a slab QR-code scam can work
A QR code contains a destination, usually a web address. Someone can print a code that resembles an original, place it on a counterfeit label, or cover a legitimate code with a replacement sticker. The linked page may imitate a grading company's verification screen.
It could display the same card, grade, and certification number printed on the slab, creating the appearance of independent confirmation. A more aggressive page might request an account login, payment details, or a fee to reveal a report. It may also prompt the visitor to download an app, browser extension, configuration profile, or "verification certificate." Those requests are unrelated to checking a card's certification and should end the interaction.
Warning signs on the linked page
Read the full domain in the browser's address bar. The important part is the registered domain, not a familiar company name placed elsewhere in a long address. Watch for misspellings, added words, unusual domain endings, or letters replaced with similar-looking characters.
A padlock or HTTPS connection does not prove that a site belongs to the grading company. It only indicates that the connection is encrypted; fraudulent sites can also use encryption. Treat these signs as reasons to close the page: Professional design is not proof of legitimacy. A copied page can reproduce logos, photographs, layouts, and certification details from a genuine record.
- The address differs from the company's known official domain.
- The page asks you to sign in before showing a basic certification result.
- It requests payment, card details, a wallet connection, or personal identification.
- It starts a download or asks you to install software.
- Links, menus, privacy information, or contact details do not work.
Verify the slab without using its QR code
Start from a trusted route you control. Use a saved bookmark, type the grading company's address yourself, or open its official app if it provides one. Avoid relying on the QR code or a verification link supplied by the seller. Enter the certification number printed on the label.
Compare every available detail with the physical card: A mismatch is a strong reason to pause the purchase and contact the grading company through contact information from its official site. Do not use an email address or telephone number shown on the suspicious page. An exact database match is useful but not conclusive. A counterfeiter can copy a real certification number and the associated card details. The lookup proves that the record exists; it does not, by itself, prove that the slab in front of you is the recorded specimen.
- Card name and identifying number
- Set or release
- Language and variant
- Assigned grade and subgrades, if applicable
- Label description
Checks to make before buying
Ask for sharp photographs of the slab's front, back, label, certification number, seams, and corners. For an expensive card, request a new photograph with a specific handwritten note or object beside the slab. This makes it harder to rely entirely on images copied from another listing. Compare the listing with the independently retrieved certification record.
If record images are available, inspect card centering, print marks, edge wear, and other visible features. Differences may have innocent explanations, including poor lighting, but unresolved inconsistencies justify walking away. Keep payment and communication within a marketplace that offers buyer protections. Refusal to provide current photos, pressure to pay outside the platform, or a price that depends on immediate action increases the risk. A QR scan should never substitute for examining the seller, slab, card, and certification record together.
What to do after opening a suspicious page
If you only opened the page, close it without pressing buttons or accepting downloads. Update the device and browser if needed, then review the downloads folder for anything you did not intend to save.
If you entered information, respond according to what you disclosed: Do not revisit the suspect link to gather more evidence. Copy its address from browser history if safe, then use independently located reporting channels.
- Change a submitted password through the real service, and change it anywhere else you reused it.
- Enable multifactor authentication and sign out other sessions where the service allows it.
- Contact the card issuer promptly if you entered payment details.
- Remove unexpected apps, extensions, or device profiles and run the device's available security checks.
- Save the web address and screenshots before reporting the page to the grading company and sales platform.
