* A fake QR code placed on a car parking machine in Conwy.
North Wales Police have sent out a warning after receiving more reports of fake QR codes being placed on car
parking machines and electric vehicle charging points
across Denbighshire and Conwy.
They warn that the scam could also spread to other parts of North Wales.
Officers say: "Criminals often place stickers with their fake QR codes on them over the
genuine QR codes. This is known as ‘quishing’ and the criminal’s fake QR code
will take you to a fake website that will steal your financial and personal
information.
"In addition to taking your money via the fake website, criminals
will also capture your bank details and possibly other sensitive information
such as passwords, financial data, or personally identifiable information
(PII). That information can also be used for other purposes, such as
identity theft, financial fraud, or ransomware."
Acting Detective Sergeant Roheryn Evans, from the North Wales
Police Cyber Crime Team, said: “Criminals are always looking to exploit
any means to trick people into providing their personal data, bank details or
passwords.
"As with all other cybercrime, consider who is asking you to click on
a QR code and whether or not the originator is genuine. Never provide personal
information unless it is a trusted source.”
Police advice when using QR codes:
· Always check for tampered QR codes (stickers)
before scanning. Some QR codes in open spaces (like stations and car parks)
could be risky.
· If in doubt, do not scan a code and use a
search engine to find the official website or app for the organisation you need
to make a payment to.
· When scanning a QR code, use the QR-scanner
built into your camera, or one that comes with your phone, as opposed to using
a downloaded app from an app store.
· If you receive an email with a QR code in it,
and you're asked to scan it, you should exercise caution as police are seeing
an increase in these types of 'quishing' attacks.
· You should always check your bank accounts
regularly and report any suspicious activity to your bank immediately.