Scanning a QR code on a parking meter or in an email can lead straight to a fake website built to steal your details.
It was on a parking machine, just like all the others I'd used. I scanned it without a second thought — it looked completely normal.
- Reema, Surrey
What is happening?
Criminals are placing fake QR codes on parking meters, posters, and in emails, or sending them by text. Scanning one takes you to a convincing fake website designed to steal card details or login information, rather than the genuine site it appears to be.
Why does this scam work?
QR codes hide their destination until after you've scanned them, and people have grown used to scanning them everywhere — for menus, parking, and payments — so it doesn't feel like the same risk as clicking a suspicious link.
Warning signs:
A QR code stuck over the top of another one, especially on parking meters or posters. A QR code in an unexpected email or text. A website that asks for card details immediately after scanning, with no other way to pay.
What to do:
Avoid scanning QR codes from posters, parking machines, or unexpected messages — type the website address in yourself instead. If you've already scanned one and entered details, contact your bank immediately.
