As technology advances, and the use of cash diminishes, convenient solutions are becoming more common, including online payment for car parking fees. Many car parking companies offer a great alternative to save time when paying using a QR code, where drivers can simply scan the code to finalise the payment at the parking location. However, what many people are not aware of is that there has been a recent spike in payment fraud using this method. Car park locations are being targeted by scammers who are printing fake QR codes and sticking them over the real ones, as recently reported in the media - exploiting drivers and directing them to mirrored fake websites. Drivers then add their bank or credit card details with the scammers essentially phishing the personal data of their victims.
This type of scams, which have been increasing in frequency across the UK and Ireland, have led to victims experiencing financial losses from penalties arising from unpaid legitimate parking tickets as well as the immediate ticket fee. Our team at ITUS Protect explains what you need to know to help avoid these car park scams:
What to look for when scanning a QR code?
1. Check for any evidence of tampering
Scammers will replace original QR codes with fraudulent ones, trying to make it as seamless as possible leading you to phishing websites. Check if the code looks out of place or different from the parking meter's overall design.
2. Be Careful of ‘lookalike’ Websites
Scammers will replicate official pages and camouflage behind the edits of the URL. They will make tiny tweaks to the URL for example changing “paybyphone” to “poybyphone”. Before making any transaction, carefully examine the entire URL. Look for the correct domain name and ensure the website uses HTTPS for secure connections.
3. Use official apps to finalise the transaction
With diligent scammers using advanced techniques to replicate in detail the official pages, we recommend taking the additional time to manually insert the location code of the parking meter into official apps like Paybyphone, RingGo or JustPark. Be sure to download the app directly from the App Store or Google Play.
What to do if you’ve scanned a suspicious QR code?
If you already entered sensitive information and are worried that you may have used a Malicious QR Code, take these steps immediately:
- Inform your Bank and report at Action Fraud to prevent financial loss and block accounts until setting up the new ones.
- Change your passwords and add two-factor authentication to important accounts to restrict predators into accessing your data.
- Sign-up for a virus or identity theft protection software to detect malicious apps and protect yourself from such software infiltrating sensitive data of your phone.
While technology continues to evolve, staying vigilant is key to protecting yourself from these scams. Taking these simple precautions will help keep you safe when paying for parking. For more tips on staying safe from digital scams, follow ITUS Protect on LinkedIn and X. We're committed to helping you navigate the ever-changing landscape of cybersecurity.
