Lesson 119 · 2 min

QR code scams

A QR code is just a hidden link or account number, and scammers paste their own codes over real ones.

You cannot read a QR code with your eyes, which is why it works so well for tricks. A sticker over a shop's code, a code in a fake parking notice, or a code in an email can send you to a fake login page or a scammer's bank account.

Before you pay by QR, look at the name your banking app shows for the receiving account. If you expected to pay a pharmacy and the name is a stranger, stop and ask the staff.

When a code opens a website, read the address before typing anything. A code should never lead to a page asking for your banking password, card details or one-time code.

Be extra wary of codes that arrive by message or letter with a warning, a fine or a prize. Open the official app or website yourself instead.

Do it now

Practise the name check

  1. 1. Next time you pay by QR, pause on the confirmation screen.
  2. 2. Read the account name out loud and compare it with the shop name.
  3. 3. If a code looks like a sticker on top of another code, pay another way and tell the shop.

Quick check

You scan a QR code at a café and your bank app shows a person's name you do not recognise. What should you do?

You scan a QR code at a café and your bank app shows a person's name you do not recognise. What should you do?

More on this

Words from this lesson

Phishing
Fake messages that pretend to be someone you trust to trick you into clicking a link, paying or sharing passwords.