I was a mobile developer on a parking app, and this is a serious issue. Our solution was to add a button in the app to verify if a QR code is valid, but I was always bothered by how tucked away the actual button was.