Quishing: fraud through QR codes threatens holiday-makers, experts warn
Fraudsters are sticking fake QR codes on parking meters and payment terminals. By simply scanning them, travellers can lose card details and money.
Fake QR codes on parking meters: fraudsters target holiday-makers
Paying for parking, booking a hotel or buying a ticket — these everyday situations are precisely what fraudsters exploit to steal financial data. According to joj.sk, security experts are warning of a growing trend in fraud through QR codes, which has been dubbed "quishing".
The principle is simple. A fraudster prints their own QR code and sticks it on a parking meter, information board or payment terminal. A traveller scans it and is directed to a fake payment gateway, where they enter their card details — and at that moment, they hand them over to the attacker. The fake page looks almost identical to the original.
Experts describe the method as a combined form of phishing. Fraudsters, in addition to replacing QR codes, also create fake hotel websites and send forged reservation confirmations. Several security organisations and authorities have already issued warnings about similar cases.
Why people fall for it
Psychologists and security experts cite trust as the main reason. When a person sees a suspicious link in an email, they are cautious. With a QR code, by contrast, they have the impression it is an official and safe element. The problem is that before scanning, they cannot see which address the code will direct them to — and that is precisely what fraudsters rely on.
The summer season makes the situation worse. Millions of people travel, pay by card abroad and scan QR codes every day. According to joj.sk, surveys show that more than half of travellers regularly scan QR codes during holiday, with many also using public Wi-Fi networks, thereby exposing themselves to a higher risk of data loss.
Five things to check
Security experts recommend checking the following before entering any payment details or password:
- check the address of the page that the QR code directed you to
- pay attention to stickers that have been pasted over or are otherwise suspicious on machines and terminals
- do not enter passwords or card details on unknown websites
- carry out bookings exclusively through the official websites of hotels and carriers
- do not trust offers that force you to act immediately
Source: Google News SK — Crime (sk)