This is a well-known problem at more than just parking lots. Any proprietor using QR codes in their place of business should generally be policing the property for rogue stickers. Obviously, quality of the business matters here a lot for that.