QR Code Scams: How to Identify and Avoid Them

Quick Response (QR) codes have thrived since the pandemic. During the pandemic, restaurants, bars, shops and others within the hospitality industry had to make changes to minimise the spread of the virus. Businesses turned to QR codes and implemented them on tables, menus and even windows and doors for customers to scan to order. And, since the pandemic, QR codes have continued to thrive. We now see them daily, such as on a Costa Coffee Machine to scan your order to collect beans on your application or in car parks to pay for parking at private facilities.

However, a burgeoning threat lies beneath their surface-level simplicity and efficiency: fake QR codes, also known as QR code scams. This sophisticated form of cyber fraud has alarmingly escalated in recent months. With a surge in these scams across the UK, it’s crucial to understand how they operate, their impact, and the necessary steps for protection.

What is a QR Code Scam??

A QR Code Scam is a deceptive practice where fraudsters exploit QR codes to perpetrate fraud and steal personal information. Typically, these scams involve the creation of counterfeit QR codes that, when scanned, redirect users to fraudulent websites. These websites often mimic legitimate businesses or services, cunningly designed to harvest sensitive data such as login credentials, financial information, and personal identification details.?

Recent trends indicate a worrying escalation in such scams. Data from the UK’s Action Fraud reveals a significant spike in reported QR code-related fraudulent activities, underscoring the need for heightened vigilance. The number of QR code scams in the UK has risen, with over 400 reported this year alone and?1,200 fake QR codes investigated by Action Fraud since 2020.

Fake QR Codes in Car Parks

Recent news reports and word of mouth in Cardiff and Bristol areas show a significant increase in fake QR codes in car parks nationwide. A woman has fallen victim to the fake QR code scam in Teeside, where cyber criminals covered the genuine QR code. The cybercriminal gang has since taken ￡13,000 from the woman.

How the Fake QR Code Scam Works?

The fake QR code scam works because cyber criminals cover the genuine QR code with a new one, which will direct them to a ‘fake’ website, pretending to be the real website. As the user is not expecting any malice in the QR code, as they have most likely paid for this car park previously, they will continue to pay as usual through the fake website.?

The person then submits the payment details, and the cybercriminals have the bank card details. The cybercriminals will then try to withdraw money, although quite often, the bank can stop this.

In the case of the 71-year-old woman who got a fake QR code scammed in Teeside for ￡13,000, the situation didn’t stop there. The cybercriminal gang then contacted the woman, pretending to be the bank, and had taken out a ￡7,500 loan within a short period.

This growing trend mirrors the increasing reliance on digital transactions and interactions, marking QR code scams as a prevalent threat in our interconnected digital landscape. It’s time to be more vigilant than ever; who knows what’s next??

Read more about fake QR codes.

For businesses affected by fake QR codes or relying on such technology, why not speak to one of our cyber security experts to see if we can help protect your business and customers??

Excellence IT is a cyber security-first Managed Service Provider based in South Wales, serving businesses in Swansea, Cardiff and Newport.?