Major warning issued over car park QR code scams amid rise in ‘quishing'

Criminals are using fraudulent QR codes in car parks to steal personal and financial information, Action Fraud has warned.
Almost £3.5 million has been lost due to QR code scams with more than 780 reports of 'quishing' made to the UK's national reporting centre for fraud and cybercrime between April 2024 and April 2025.
Also known as QR code phishing, 'quishing' is a type of cyberattack where QR codes are used to trick individuals into visiting fraudulent websites or downloading malware.
Fraudulent QR codes are most frequently used in car parks, with criminals using stickers to tamper with the scan codes already in place on parking machines.
The scam is also used on online shopping platforms, where sellers received a QR code via email to either verify accounts or to receive payment for sold items.
Some phishing attacks impersonate HMRC, or other UK government schemes, targeting people with QR codes designed to steal personal and financial details, reports show.
People are being asked to stay vigilant and double-check QR codes to see if they are malicious, or have been tampered with, before scanning them online or in public spaces.
Claire Webb, Acting Director of Action Fraud, said: 'QR codes are becoming increasingly common in everyday life, whether it's scanning one to pay for parking, or receiving an email asking to verify an online account. However, reporting shows cyber criminals are increasingly using quishing as a way to trick the public out of their personal and financial information.
'We're urging people to stop and check before scanning QR codes, to avoid becoming a victim of quishing. Look out for QR codes that may have been tampered with in open spaces, or emails and texts that might include rogue codes. If you're in doubt, contact the organisation directly.'
Although QR codes used in pubs and restaurants are usually safe to scan, ones in open spaces like train stations or car parks, might pose a greater risk.
Action Fraud suggests checking for signs that codes may have been tampered with, such as a sticker placed over a legitimate QR code.
If you are unsure, it's best to not scan the QR code at all and instead find the official website or app of the organisation you are trying to make the payment to.
If you receive an email with a QR code in it, and you're asked to scan it, you should be cautious due to an increase in these types of 'quishing' attacks.
Another precaution to take is to always use the QR scanner that comes with your phone, rather than using an app downloaded from an app store, because it is more secure.

Try Our AI Features

Explore what Daily8 AI can do for you:

Learn with AIFact CheckingText to SpeechAI Summary

Related Articles

Telegraph

40 minutes ago

• Telegraph

Don't blame the police – it's woke politicians who have given up on fighting crime

SIR – Commentators are far too quick to abuse the police for prioritising certain crimes above others ('Faith in the police', Letters, June 15). We must stop this, as at the sharp end of policing we have constables obeying orders from their seniors. Who controls senior police officers? The politicians we voted for. Twelve months ago they were Conservatives; now they're Labour. They are all tarred with the same woke brush. Our constables are treated with derision because they are the face of policing. Shame on our politicians. Peter Gittins Stirling SIR – Many senior police officers, often over-promoted because they hold degrees, have turned policing on its head with their politically correct pursuit of social-media offences. In 1979, my first shift sergeant told me that, if you allow a man to go unpunished for stealing something as small as a Mars bar, it won't be long before he returns to empty the shop. He held similar views on graffiti and anti-social behaviour. I challenge senior officers to run a six-month experiment: flood the streets with officers out of their cars, arresting anyone who commits an arrestable offence, no matter how minor, and see how quickly such behaviour subsides. This would be especially effective if the Crown Prosecution Service were to back up the police with court action, as it did after the recent riots. Tim Davies Lampeter, Cardiganshire SIR – As a resident of Bournemouth, I want to see more officers of the calibre of Lorne Castle on our streets, willing to take action against troublemakers and make our town safe. Yet this officer was dismissed for gross misconduct after tackling a masked 15-year-old suspect to the ground and holding him down while telling him to 'stop screaming like a b----' (report, June 20). With crimes going unsolved and unpunished, it is fair to say that faith in policing in Dorset is nonexistent. Mr Castle was sacked because his actions had supposedly undermined public confidence in the police. However, it is quite apparent to me that the opposite is true: in sacking him, the misconduct panel has damaged public confidence. Can we therefore expect its members to be removed? Barry Gray Bournemouth, Dorset SIR – Daniel Hannan deplores the state of public areas in Britain, along with growing threats to personal safety ('Britain is turning into a Third World country', Comment, June 15). In smaller communities, where councillors care little for grandstanding, public life goes on as it should. In Norwich, the Covid-era habits of guerrilla gardening, after-hours litter-picking and police liaison have endured, and are being adopted more widely. 'Friends' groups who take care of provincial railway stations across the UK are pioneers in this area. What was a default task for underemployed railway platform staff has been taken up by community activists. Thomas Carr Norwich A shift in British values SIR – As I approach my 75th birthday, I reflect on how values have changed over my lifetime. Respect for our elders was drummed into us during my youth. Today, we have a Government that is willing to take winter fuel support away from pensioners, and tax inheritance that would otherwise go to heirs. To cap it all, it now seems likely that we will have to navigate the intricacies of assisted dying ('Assisted dying Bill set to become law', report, June 20). It will be quite a job to ensure that there is no coercion, no fear of 'doing the right thing' to avoid being a burden, and that the professionals are driven by the right motives. A viewing of the cult film Soylent Green might help us understand the kind of dystopian future towards which we seem to be headed. Tony Wolfe Penrith, Cumbria Lebanon's liberation SIR – Those Lebanese dancing under missiles fired at Israel (report, June 18) ought rather to cheer the Israeli planes heading for Iran. After decades of death, destruction and economic collapse, can they still not see the enormous damage that Iran, via Hezbollah, has inflicted on their once peaceful land? What have they gained from being a centerpiece of Iran's 'axis of resistance' against Israel? Israel and Lebanon once peacefully coexisted. It was even jocularly noted that if any Arab country first made peace with Israel, Lebanon would be the second to do so. Hezbollah was the reason that Lebanon had no president for two years; Israel's loosening of its tight grip on the state is what finally broke the impasse in the legislature. In violation of UN-brokered agreements, Hezbollah militarised south Lebanon below the Litani River. The day after Hamas's October 7 massacre of innocent Israeli civilians, Hezbollah initiated daily rocket fire into northern Israel, leading to massive destruction and the flight of tens of thousands of residents. Subsequent fighting has yielded yet more destruction and depopulation on the Lebanese side of the border. With Hezbollah and its patron, Iran, weakened, Lebanon has a real opportunity to free itself from their malignant yoke. Should it succeed in doing so, Israelis would be among the first to dance and cheer, welcoming a renewal of friendship. Richard D Wilkins Syracuse, New York, United States The logic of Sizewell C SIR – Research suggests that Sizewell C nuclear power station (Letters, June 20) will cost approximately £12.5 million per megawatt to build. The Rolls-Royce small modular reactor (SMR) units are estimated to cost less than £5 million per megawatt. Sizewell C is unlikely to be commissioned before the mid-2030s, allowing for the usual delays. Overall build time for the SMR units is estimated to be four years, including testing and commissioning. Given that the small reactors are less than half the price and can be built twice as quickly, why are we bothering with Sizewell C? Ian Brent-Smith Bicester, Oxfordshire SIR – I was interested to read your report (June 18) about Westinghouse wanting to site a large nuclear power station at Wylfa on Anglesey. The Nuclear Industry Association keeps repeating the mantra that Wylfa is the best site in the UK for a large nuclear station. Unfortunately, it is forgetting about the grid constraints that give Ed Miliband, the Energy Secretary, headaches elsewhere. As the National Energy Systems Operator has said, the grid in North Wales will be near capacity by 2030, and a new line of pylons will have two national parks and an Area of Outstanding Natural Beauty to negotiate before fighting through the Midlands to southern England. The south-east of England will be deficient in renewables, so to minimise total system cost, that would be the best place to site a new station. Dr Jonathan F Dean Campaign for the Protection of Rural Wales Llannerch-y-medd, Anglesey Training nurses SIR – In the 1980s, I taught at a girls' secondary school in Sittingbourne, Kent. Following a good basic education, at 16 many of our pupils went on to become nurses at local hospitals (Letters, June 15). When the university degree requirement was announced, the careers adviser – a lady of considerable experience – said: 'That's the end of the British nurse. Many of our girls do not want to aspire to degrees. We will lose a huge number of competent, caring health professionals.' Why have successive governments ignored this crisis? Ministers should work towards providing high-class, on-the-job training for those who have already proved themselves capable of following their chosen career. Jeannette Meyers Ashford, Kent Fallen Angel SIR – In a prime spot in Lavenham – England's best-preserved medieval village – stands the 600-year-old Angel Hotel. It has been a public house since 1420. For want of a tenant, this once convivial meeting place now stands empty, neglected and forlorn. When I came to live in Lavenham 35 years ago, the Angel was thriving and profitable. With the right management, it could quickly regain its former popularity and become a magnet for tourists from all over the world. As for the locals, we would flock back to a well-run village pub. David Brown Lavenham, Suffolk Lunches box SIR – My sister and I started school in 1950. For lunch (Letters, June 15) we took a bread and dripping sandwich in a greaseproof bag with our names on. The teacher took these offerings from us on arrival and put them in a box with all the others. There were no fridges then. They were given out to the appropriate child at lunchtime. Jan Denbury Bradford-on-Avon, Wiltshire Lads and ladies SIR – It appears that using the term lads in the workplace when there are females present could count as sexual harassment (report, June 12). Further, a recent complainant may be entitled to compensation. With this in mind, I will contact all the bars and restaurants that my wife and I have visited in recent years and demand redress for sexual harassment. Phrases such as 'Hello guys', 'Is everything OK with you, guys?', or 'Would you guys like to see the dessert menu?' surely fall into the same category. I wonder if I can find a sympathetic judge. Vic Storey Dereham, Norfolk When offices ran on ink and blotting paper SIR – With reference to Vivien Womersley's letter (June 15) on inkwells in school desks, I had to refill them and change blotting paper at the bank after I left school aged 16. The manager used red ink, and my hands ended up covered. Veronica Lown Staines-upon-Thames, Surrey SIR – I was gratified to read Vivien Womersley's recollection that the typical ink monitor from her school days was 'a trusted, steady-handed classmate'. My own appointment as ink monitor at a Hornchurch primary school in 1955 gave me useful experience in the responsible allocation of resources. However, I then went into academic life, where I fear I wasted much ink. Shanacoole, Co Cork, Ireland

BBC News

an hour ago

• BBC News

Dating app scam victims told 'don't suffer in silence'

Students are being urged not to suffer in silence when targeted by scams on dating apps, as investigators see blackmail cases teams at Nationwide, the UK's biggest building society, said trusted friends could help potential victims avoid sending private or intimate images during new online relationships. Anyone who has been scammed should report cases to the authorities, they student in Cardiff told the BBC how a drink in the pub had alerted them to the risk of a friend being tricked by fraudsters using AI year, the National Crime Agency (NCA) put out its first ever all-school alert, warning teenagers about the dangers of sextortion. Blackmail warning Sextortion is when criminals pose as young people online, trick a victim into sending sexually explicit material, and then blackmail Burksys, head of fraud operations at Nationwide, said that scammers were "efficient and unrelenting". As a result, these kinds of scams were "commonplace" among on such crimes is difficult to gather, as they are recorded in different ways or are never reported at all. A survey by Nationwide suggested 28% of students asked had been scammed, and 50% of students worried about becoming a year, BBC News sent a Freedom of Information request to every police force in the UK, asking how many reported blackmail offences featured the word "sextortion" over the last 33 forces (out of a total of 45) who responded recorded almost 8,000 blackmail cases logged with a reference to sextortion in 2023. The same number of forces recorded just 23 in 2014. All the forces to respond were in England and Wales. 'You're talking to a bot' On a night out with friends, Emma Evans, a student in Cardiff, was chatting to one of them about his chats on dating suggested the group look through some of the conversations, but one "particularly attractive and particularly keen" match raised alarm bells."We looked at this chat and the thing that gave it away was that this person was saying the same words over and over again," Emma told BBC Radio 4's You and Yours."For example, he kept on saying how he wanted to find someone who is really passionate over and over again, and he wasn't really answering my friend's questions."The group pointed out to their friend that the language seemed to be the speech patterns of an AI chatbot. Talk to a friend Jim Winters, head of economic crime at Nationwide, urged people not to overshare images, particularly with someone they had never met."Blackmail is one of the hardest things to face and it's happening more often. It's not easy but if something doesn't feel right, speak up," he said. "It might be tempting in the moment to share information or photos but once shared, you will never have control over it again."He has the following tips:Look out for odd phrases in messages and conversations that do not relate to what you have writtenPut any profile photos into a search engine and see if they have been used elsewhere, and are stock imagesIf you are unsure about a situation, show the messages to someone else for a second opinion before things go too farAnyone who is being blackmailed should report their case to the authorities, for help and support"Talk to someone you trust, maybe a friend or family member. Don't suffer in silence," he said. Exploiting grief As well as targeting young people near the start of their lives, fraudsters have been stepping up their attempts to trick the friends and family of people who have exploit the grief of bereaved families by impersonating them online and charging mourners to see funeral livestreams that should be free, according to the Chartered Trading Standards Institute (CTSI) which supports businesses and local authorities' trading standards livestreams became more popular during lockdown, and have continued since for those who struggle to attend a funeral in contact mourners with bogus links to watch a funeral and demand payment, or set up fake donation pages on legitimate Hart, CTSI lead officer for doorstep crime, said: "This is a truly despicable scam – targeting people during one of the most emotionally difficult moments of their lives. "It's hard to imagine a more callous form of fraud. What's particularly upsetting is that victims often feel they can't report what's happened for fear of adding further stress to grieving families. "That silence is exactly what these criminals are counting on. We need people to stay vigilant, share warnings and report anything suspicious."

The Sun

an hour ago

• The Sun

Ten girls taken to hospital after being pricked by ‘man with syringe' at French music festival as one arrested

AROUND ten girls were reportedly pricked by a man with a syringe during a French musical festival. The incident is said to have unfolded in Metz on Friday, when over 50,000 flocked to celebrate World Music Day, Le Républicain Lorrain reports. 2 The girls - most reportedly minors - were targeted by one or more people at around 10pm, according to the local outlet. The alleged attacks happened between two popular spots in the city centre, Place de la République and Place Saint-Jacques. Firefighters at the event quickly tended to the girls, who were then rushed to hospital "for analysis", according to Metz mayor François Grosdidier. A man was arrested by local cops in connection with the incidents. He was taken to the police station to be interviewed. Grosdidier estimated that a crowd of 50,000 packed the city centre, adding: "It's Saturday night and it's still hot… There are a lot of people, people everywhere, in all the city centre streets." Police remained on duty throughout the night following the incident. It comes as a school girl was stabbed to death by a 15-year-old student who went on a knife rampage at a school in the French city of Nantes. The attacker, wearing black clothing and a balaclava, also stabbed three other students who were rushed to hospital. When armed cops arrived at the scene, the attacker reportedly shouted "shoot me in the head" before being handcuffed and taken away. School knife horror leaves girl dead and three students injured in France The suspect was named as Justin P. by French newspaper Le Parisien. Just hours earlier, an anonymous email is said to have gone around the school speaking of a "revolt". The manifesto, reportedly seen by Le Parisien, spoke about eco issues. Meanwhile, a teaching assistant was stabbed to death by a teenage student over a week ago. The 31-year-old was stabbed several times outside the Françoise Dolto school, in north-east France. She tragically died in hospital as a result of her injuries. A 14-year-old pupil was arrested on suspicion of fatally stabbing the teacher who was leading a bag search outside the school at the time. The victim - identified only as Melanie G - was mum to a four-year-old boy and has been described by locals as "adorable" with a "caring nature". 2