Congratulations! You've just scanned a Fake QR code

but it’s not just any code. The code you scanned is designed to help you understand the dangers of QR code scams, which have been increasingly used by cybercriminals. Below you’ll learn about how QR code scams work, how to protect yourself, and recent examples of criminals using QR codes to scam people out of their hard earned money.

How QR Code Scams Work

The basic concept behind these scams is simple: scammers place a sticker with a fraudulent QR code over the original code, which unsuspecting individuals scan to make payments. When you scan the fake QR code, instead of paying for parking or a legitimate service, your payment is redirected to the scammer’s account. In some cases, the scam can even steal personal information if the QR code links to a phishing page designed to collect sensitive details.

How to Protect Yourself from QR Code Scams

  1. Inspect QR Codes Before Scanning: Before scanning a QR code, take a moment to look at it closely. Ensure it hasn’t been tampered with. If the code appears to be placed over another code, it’s likely a scam.

  2. Use Trusted Apps: Always use trusted payment and banking apps when making transactions via QR codes. Many apps have built-in safeguards to alert you if the destination URL seems suspicious.

  3. Verify URLs Manually: If you are ever in doubt, type the URL into your browser manually instead of scanning a QR code. For example, when paying for parking, go directly to the official city or parking provider’s website.

  4. Report Suspicious QR Codes: If you spot a suspicious QR code, especially one placed over another code, report it to the appropriate authorities or venue management. This helps prevent others from falling victim to the scam.

Recent Incidents in the News

Several global incidents have demonstrated the dangers of fake QR codes. Here are a few examples from both the U.S. and abroad:

  • San Francisco, California: In October 2024, the San Francisco Municipal Transportation Agency (SFMTA) uncovered a scam where counterfeit QR code stickers labeled "Phone Pay" were placed over legitimate parking meter codes near Fisherman's Wharf. Scanning these fake codes redirected users to fraudulent websites designed to collect credit card information. (sfgate.com)

  • Miami, Florida: In December 2024, the Miami Parking Authority removed all QR codes from over 7,000 parking signs to prevent scams. This decision was prompted by reports of fake QR codes leading to fraudulent websites that could compromise users' personal and banking information. (cbsnews.com)

  • London, United Kingdom: In November 2024, several drivers in Central London reported falling victim to QR code scams after they scanned fake parking payment codes placed on meters and signs. The fraudulent codes led to phishing sites designed to collect sensitive data. Local authorities have warned residents to stay vigilant and report any suspicious activity. (bbc.com)

  • Sydney, Australia: In August 2024, the City of Sydney warned citizens about a series of fake QR code scams targeting parking meters. Scammers placed their own codes on top of legitimate payment instructions, tricking drivers into sending money to fraudulent accounts. The city has since implemented additional security measures and advised people to verify codes before scanning them. (Parking Australia)

Created with help from ChatGPT