Fake QR code in a car park

Fake QR code in a car park

I often warn people about QR codes, but it may be easier to understand the seriousness of these warnings when you can clearly see what a scam looks like. Here is a film I was allowed to use for educational purposes (with my voice over). In the video a woman peels off a sticker on a sign about parking fees at a car park in Ireland. The sticker, placed with criminal intent, is a QR code that fits perfectly on top of a valid QR code that the parking company has encouraged you to use.

0:00
/0:29

According to the statement, the woman's daughter lost €1,000 after scanning the code, landing on a page that looked legitimate, and entering her credit card details.

Credible actors should not be making use of QR codes in public places. Organizations put their own reputation at risk and they risk the safety of people who are encouraged to scan the code. Sometimes fraudsters are not immediately after money but are seeking to collect personal data or passwords they can use to commit further types of fraud.

Fake QR codes also appear, for example, on campaigns for donating money, marketing materials about getting discounts, and on fake traffic tickets. Criminals, of course, love the fact that government agencies and public sector institutions also encourage citizens to scan QR codes without verifying where they end up.

Friends don't let friends scan QR codes.


P.S.) Thanks to Jonas who tipped me off about the video!

P.S. 2) If you peel off stickers in public places, use a tool and not your bare hands. It has happened that malignant people hide razor blades behind stickers.

Also read

QR code hijacking can divert donations to criminals
QR codes are immensely popular but also immensely open to fraud when they are used in public spaces and forums. Hijacking donations is one example of how bad actors can take advantage of your reliance on QR codes.