OP, I'd also weave into your reps somewhere that 'as the authority know, there was a fake QR code placed on the traffic sign/payment machine(delete whichever does not apply pl)..'
They must know because the CEO was there to give you a PCN. So, irrespective of whose fault it was that it was there the council must know because the CEO surely removed it and reported it, didn't they!!!