QR codes make life easier - but unfortunately they also make fraud easier. Sometimes the image with the many white and black squares leads into the hands of fraudsters faster than you think. For "Safer Internet Day" on Tuesday, February 11, 2025, we explain how the crook trick works.
QR codes (quick response) can be easily targeted using a cell phone camera and lead to useful information. However, users should take a closer look when paying, for example at parking ticket machines. QR code fraudsters are also lurking in shops.
They are not primarily after the small parking fees. They want the credit card details. Anyone who scans the fraudulent QR code ends up on a payment platform. Similarities to actual bank or ATM operator sites are of course no coincidence. Customers are asked to enter their credit card details, including security codes or PINs. This opens the floodgates for the fraudsters to withdraw a lot of money.
Collected instead of paid
Unfortunately, this also works in online retail - two examples from February 2025:
An Iserlohn man offers to buy a camera. A couple from Meinerzhagen want to get rid of shoes.
The alleged prospective buyers send him QR codes. This is supposedly to prove that they have paid. The sellers follow the link and enter their credit card details. The man from Iserlohn hears nothing more afterwards. The Meinerzhageners are asked to authorize a payment of 700 euros via PushTan - which they do not do. This is followed by the threat of a fine for fraud.
Both victims filed a complaint with the police.
Some operators of online flea markets offer a "secure way" to pay. This makes it possible to reverse payments. However, users are ONLY allowed to do this within their customer account. If you follow links or QR codes in emails or Messenger messages, you risk ending up on fake sites.
- Check the Internet address you are directed to: Does the link lead to the real site of the alleged organization or city?
- Keep your security software up to date!
As a general rule when using online services: use strong passwords! You can find tips on this on our campaign page at https://www.mach-dein-passwort-stark.de/betrugsmaschen-erkennen/#safer-internet-day