This is reported by Kontrakty citing the press service of the Cyber Police Department of the National Police of Ukraine.
“Fraudsters are replacing QR codes on official information boards or simply placing them in public areas. By scanning such codes, users are directed to counterfeit websites that mimic real online services. As a result, the perpetrators can gain access to banking information and steal funds,” the report states.
According to law enforcement, these incidents most commonly occur in places where people frequently use QR codes for quick payments: during parking, public transport payments, event entry, or making charitable donations.
“Visually distinguishing a high-quality counterfeit code from a genuine one is very difficult, so the main advice is to always check the website address before entering any confidential information,” the police noted.
Law enforcement provided a series of tips to help protect against fraudsters.
“Scan QR codes only from reliable sources – avoid codes placed on random stickers, flyers, or advertisements. Before scanning, inspect the sticker – look for possible signs of tampering (additional layers, uneven edges, different fonts).
Use the link preview function – most smartphones allow you to see the URL before proceeding,” the NPU advises.
The Cyber Police recommends that people always pay attention to the web address after scanning a QR code – even if the site looks convincing, any differences in the domain can be a sign of fraud.
“Check for a secure connection (https://) – if the site lacks a security certificate, entering any information there is risky. Do not enter banking details on unknown sites or without necessity. If you encounter a suspicious QR code, report it to the establishment's administration, support service, or law enforcement agencies,” the press service stated.
Law enforcement advises citizens to use virtual or temporary cards for online payments – this will help avoid significant financial losses in case of a data breach.
“If you become a victim of fraud, immediately contact your bank to block your card and submit an electronic request to the cyber police via the link,” the NPU stated.