Blog

Oct 14, 2024

Warnings as criminals target east coast parking meters with bogus QR codes – The Irish Times

A scam which uses bogus QR codes on parking meters to fool people into downloading malicious software or submitting sensitive financial details to websites controlled by criminals has been identified

A scam which uses bogus QR codes on parking meters to fool people into downloading malicious software or submitting sensitive financial details to websites controlled by criminals has been identified in areas of the east coast stretching from Greystones to Malahide.

Fingal County Council has issued a warning alerting all motorists to be vigilant of the scam that has been deployed on some Pay and Display parking meters and said its staff were currently assessing machines and removing any bogus QR codes placed on them.

Payzone, which operates the cashless parking service across all Dublin local authority areas, has also engaged IT experts to work with it on taking down the fraudulent links from the QR codes.

“The council is aware that a bogus QR sticker is being placed on some machines, bringing the user to a fraudulent website which requests credit card details and other personal data,” Fingal County Council said.

It added that it had reported the scam to the Garda and warned motorists “not to scan any QR codes or bar codes that may appear on Pay and Display machines. Instead, download the genuine parking app Payzone in use directly from your phones app store and use this, or pay directly by card or cash where available.”

While QR codes are not new, one council source said they were not aware of its parking meters being targeted in this fashion before.

In a warning posted on the Payzone website, it called on consumers to make sure when downloading its app to only download it from trusted app stores and to make sure the app listed Payzone as the developer and to be alert to any apps with similar names or those from different developers.

The way the QR code scam operates differs depending on the location or the criminals behind the scam.

One form of the scam sees people who scan the bogus QR codes brought to websites dressed up to look like legitimate enterprises where they are asked for sensitive details. All the information including credit or debit card details is then collected by the criminals.

An alternate version sees the devices which access the QR codes infected with malware which can spy on people and steal data or even take full control of their devices and encrypt them until ransoms are paid.

Bogus QR codes can also send mails from victims’ accounts which can be used by criminals to target others.