Drivers who pay for parking at car parks have been issued an important warning about QR code scams. Consumer watchdog Which? has urged motorists to make several checks before paying for car park stays, or risk having their personal data and money stolen.
Which? Issues Warning
Taking to social media, Which? said: "Don't get caught out by a QR code scam." It added: "Criminals often tamper with QR codes in public places – like restaurants, pubs, shops, bus stops, train stations, and car parks – to redirect you to fake websites or malicious apps. Here are five simple ways to protect yourself from QR code scams."
How to Stay Safe
A Which? spokesperson advised: "Before you scan a QR code in public, always check to see if it's been tampered with. If it looks suspicious, don't use it. Just type the web address in manually on your device to make sure you visit the correct website."
The spokesperson continued: "Most phones have a scanner built into the camera, so use this instead. Don't use an app to scan a QR code as it increases the risk of downloading malware or being directed to a misleading advert."
Additional tips include previewing the web address as you start to scan it. If it doesn't begin with HTTPS, looks different, or is not the site you are expecting, do not visit it. Avoid QR codes in emails as scammers are increasingly using them to disguise malicious links. Email security tools do not always scan images. Do not use QR codes to download apps as it increases the risks of downloading something dodgy. Use a verified app store like Google Play or the Apple App Store and always do your research on the app before you download it.
British Parking Association Statement
A statement on The British Parking Association's website reads: "Recent scams involve fake QR codes, fraudulent Penalty Charge Notice (PCN) text messages and contactless card payment fraud. Here's what you need to know to stay protected. Scammers may place fake QR codes in parking areas including on official signage, leading users to fraudulent websites designed to steal payment information."
