diff --git a/libnm/nm-device-wifi.c b/libnm/nm-device-wifi.c
index 30dbd09f89..5ea7eca194 100644
--- a/libnm/nm-device-wifi.c
+++ b/libnm/nm-device-wifi.c
@@ -288,7 +288,7 @@ prepare_scan_options (GVariant *options)
 	else {
 		g_variant_builder_init (&builder, G_VARIANT_TYPE_VARDICT);
 		g_variant_iter_init (&iter, options);
-		while (g_variant_iter_loop (&iter, "{sv}", &key, &value))
+		while (g_variant_iter_loop (&iter, "{&sv}", &key, &value))
 		{
 			// FIXME: verify options here?
 			g_variant_builder_add (&builder, "{sv}", key, value);