QR code fraud
Stay vigilant!
A new form of fraud is on the rise
As part of our efforts to prevent and raise awareness about fraud risks, we wish to draw your attention to a significant increase in attempted fraud related to the use of QR codes.
Easy to use and increasingly popular in our daily lives, QR codes can also be misused by fraudsters for malicious purposes.
What are the main methods used?
Fraudsters employ several techniques to entice victims to scan a fraudulent QR code, including:
- sending letters by post requesting that a QR code be scanned under various pretexts:
- activation of a new bank card
- fake fines
- letters impersonating health insurance or other official organisations
- affixing fake QR codes to parking meters, pay stations or electric vehicle charging stations, inviting payment.
- fraudulent displays in the premises of certain Group entities, offering participation in a competition.
What happens after the QR code is scanned?
In these situations, the QR code usually links to:
- either a fake website imitating a banking site, prompting the user to enter sensitive information (this is a classic phishing scam);
- or malware capable of collecting login details and sensitive data, and infiltrating the smartphone to facilitate future fraud, particularly in a “fake adviser” scenario.
Our recommendations to protect you
To limit the risks, we recommend:
- to carefully analyse the website address after scanning a QR code;
- to run your finger over the QR code to check for the possible presence of a sticker affixed to official material;
- if in doubt, never scan a QR code;
- in general, never follow a link, regardless of its form (QR code, URL, link received by message or email), if you have any suspicions.
Our team is at your service.
We would be grateful if you could notify us of any attempted fraud of this type to help ensure everyone's safety.