diff --git a/src/pretix/api/views/checkin.py b/src/pretix/api/views/checkin.py
index 82f0eac191..311a6bd602 100644
--- a/src/pretix/api/views/checkin.py
+++ b/src/pretix/api/views/checkin.py
@@ -165,6 +165,7 @@ class CheckinListViewSet(viewsets.ModelViewSet):
 
         if not serializer.validated_data.get('position'):
             kwargs['position'] = OrderPosition.all.filter(
+                order__event=self.request.event,
                 secret=serializer.validated_data['raw_barcode']
             ).first()