Scammed at the meter? How to spot fake QR codes

QR code fraud – known as quishing – has surged in recent years. Action Fraud received nearly 1,400 reports in 2023, up from just 100 in 2019. Criminals place fake codes in busy areas to direct people to malicious sites that steal sensitive information such as bank details.

Unfortunately for drivers, parking meters and car park ticket machines are among the most common targets for this scam.

Katherine Hart from the Chartered Trading Standards Institute says victims often don’t realise they’ve been scammed until much later. Fraudsters typically start by taking a small amount – like £2.99 – then use the stolen data for bigger scams.

“Days or weeks later, victims get a call from someone posing as their bank or the police,” Hart said. “With the info already collected, scammers use pressure tactics to steal even more.”

These operations are believed to be run by organised crime gangs, with a hierarchy of individuals involved and lower-level members placing the stickers. Hart believes the true scale is much larger due to under-reporting.

So, how do you spot a fraudulent QR code?

Here are some tips on how to stay safe when you pay for your parking using this method:

• Check for tampering: Before scanning a QR code in public, look closely. Is the sticker slightly off-center? Does it look like it’s been placed over another label? These could be signs of a fraudulent overlay.
• Verify the source: Only scan QR codes from trusted sources. If you’re unsure, search for the official website or use a known app instead of scanning.
• Use security settings: Some smartphones offer alerts when a QR code leads to an unverified or suspicious site – turn these on if possible.
• Report suspicious activity: If you think you’ve scanned a fake code, report it to Action Fraud immediately. Even small incidents can help build a bigger picture for investigators.

What does the industry say about this?

Some parking companies are rethinking their use of QR codes altogether. National Car Parks (NCP), which manages 800 sites across the UK, has already introduced daily code checks and is considering removing QR codes from its signs to reduce risk.

A spokesperson said: “We understand the value of QR codes and will still use them where we can do so safely. But we’re reviewing options to minimise fraud, which may include directing customers to our website instead.”

Authorities, including the National Crime Agency and the National Cyber Security Centre, are also encouraging the public to remain alert.

Gary Miles, head of crime at the National Fraud Intelligence Bureau, advised drivers stop and check before scanning a QR code. If you’re in person, look for signs of tampering. Online, be wary of emails or social media posts that seem off.

Even in places where QR codes are used for convenience – such as schools, restaurants, or public services – you must always stay vigilant. As Hart put it: “People need to stop and think before they scan. It might look like a shortcut, but it could lead straight to a scam.”

Car change? Carwow!

Looking for a new set of wheels? With Carwow you can sell your car quickly and for a fair price – as well as find great offers on your next one. Whether you’re looking to buy a car brand new, are after something used or you want to explore car leasing options, Carwow is your one stop shop for new car deals.

Click here to follow us on WhatsApp, where you can keep up-to-date with all the latest news, reviews, advice guides and videos.