← Latest briefing

Technology

Reports of QR code scams jump sevenfold over four years in parts of the UK

Cybersecurity authorities warn of increased fraudulent QR codes on parking meters, emails, and advertisements as reports climb.

The short version

  • Fraud reports mentioning QR codes across England, Wales, and Northern Ireland reached 2,743 over the past year, up from 341 in the year ending August 2022.
  • Scammers are placing fake QR code stickers in public parking areas, embedding them in phishing emails, and utilizing malicious scanner apps to steal payment details and trigger recurring bank charges.
  • The National Cyber Security Centre recommends using built-in smartphone camera scanners instead of third-party scanning apps to avoid deceptive ads and malicious links.

Key facts

  • Report Fraud received 2,743 scam reports mentioning QR codes over the past 12 months in England, Wales, and Northern Ireland, compared to 341 during the year ending August 2022.[BBC News]
  • A driver in Caernarfon, North Wales, was charged £1 and targeted for a £60 recurring monthly subscription after scanning a fraudulent QR code sticker placed on a parking meter.[BBC News]
  • Cyngor Gwynedd stated that it does not use QR codes for parking payments and removed two unauthorized code stickers from local car parks over the past year.[BBC News]
  • Microsoft recorded 18.7 million email-based QR code scam incidents in March of this year, identifying it as the fastest-growing email threat technique.[BBC News]
  • The UK National Cyber Security Centre advised consumers to scan codes via built-in phone cameras rather than downloading third-party scanning applications, which can present confusing advertisements.[BBC News]

What remains uncertain

  • The full scale of financial losses and total victims remains unknown, as reporting agencies acknowledge that many victims do not file official reports.[BBC News]

Sources