Whether for paying bills, at car park ticket machines or in restaurants, QR codes have become an integral part of our everyday lives. Fraudsters also know how to take advantage of this.
07.04.2026 –In so-called "quishing" (QR code phishing), fake QR codes are used to lure victims to websites that have been tampered with or to redirect payments to phoney recipients. Examples include fake QR codes on car park ticket machines or on parking penalty notices.
This is how you can protect yourself:
- Check the URL: Many QR code scanners (but unfortunately not the cameras in mobile phones) show where the link leads - take the time to look at the address carefully.
- Do not enter any personal data: If a page asks for PINs, SMS codes, CVC/CVV numbers or passwords, abort the process immediately.
- Check the QR code: In public places in particular, fraudsters can stick specially created QR codes over genuine ones. It is therefore worth taking a close look at the code.