QR codes have become ubiquitous, appearing on various surfaces like pub tables, restaurant bills, and parking machines. While most individuals scan them casually, these innocent-looking codes can lead to financial ruin if manipulated by scammers.
In the UK, fraudsters have been deploying fake QR codes over authentic ones in locations such as car parks, pubs, and restaurants, deceiving unsuspecting individuals into divulging their banking information. This fraudulent activity, known as “quishing” (QR-code phishing), has resulted in victims losing nearly £3.5 million within a year, as per reports from Action Fraud.
Recent findings from the national reporting center indicate the presence of counterfeit QR codes on online shopping platforms. Sellers receive dubious QR codes via email, purportedly for account verification or payment processing for their goods.
Instances have surfaced where scams impersonating HMRC and other UK governmental bodies leverage QR codes. These codes, comprising small black-and-white squares, can be generated by anyone, with some serving as entry points for scammers.
With the widespread adoption of QR codes in dining establishments, the risks associated with fake QR codes are escalating. Authorities like Cambridgeshire Police have launched campaigns to educate the public about the dangers of counterfeit QR codes. This initiative followed an incident where an individual lost £13,000 after scanning a code on a parking machine.
Scammers create counterfeit QR code stickers and affix them over legitimate codes at various locations like pubs, cafes, restaurants, and parking machines. Upon scanning what seems to be an authentic code for payment or browsing, individuals are redirected to a fraudulent website resembling the genuine one.
These bogus websites are crafted to harvest sensitive data, such as banking credentials or login details, or even install malicious software on devices. According to a spokesperson from tech firm OddsMonkey, the inconspicuous nature of QR codes makes it challenging to discern their destination, making it crucial to exercise caution.
Individuals using QR codes for daily activities, such as ordering at restaurants or paying for services, are at risk. The proliferation of QR codes during the pandemic has made this scam more prevalent, with businesses adopting QR technology to minimize physical contact.
Before scanning any QR code, it is advisable to scrutinize it closely for signs of tampering, like overlaid stickers or recent alterations. To verify its authenticity, run your fingers over the code or opt for alternative payment methods when possible to avoid potential risks.
Always validate the web address before entering personal details, ensuring correct spelling and HTTPS encryption for security. If any suspicion arises, trust your instincts and refrain from proceeding further.
When in doubt, seek assistance from staff for payment links or use official business channels for transactions. Utilize your phone’s camera app to preview links and avoid scanning QR codes from unsolicited sources.
As the use of QR codes becomes routine, scammers capitalize on this familiarity. Taking a few moments to exercise caution can safeguard individuals from financial losses.
In case of falling victim to a QR code scam, promptly contact your bank and report the incident to Action Fraud. If encountering a suspicious code, report it to prevent others from being ensnared in fraudulent activities.

