Weekly Fraud update from West Mercia Police - Economic Crime Unit - 18/03/2026

Weekly Fraud update from West Mercia Police - Economic Crime Unit - 18/03/2026

QR CODE FRAUDS

QR Codes have been around for several decades now but have become more prominent in the last few years. It is also forecast that in the near future QR codes will be gradually replacing bar codes on products.

So once again criminals are seizing the opportunity to use malicious QR Codes to steal money, and personal information.

The majority of QR code scams reported so far have been in open spaces such as station and car park machines, so always check the QR code sign to see if appears to have been tampered with, or has another label stuck on top of it.

However, QR codes are now appearing in greater numbers in phishing emails, often now called “Quishing”. Criminals realise that the public are now more aware of the dangers on clicking on links in unsolicited emails, so are using QR codes instead to direct the recipient to a malicious website.

Whilst most of these QR codes are genuine, it is always worth just taking a few minutes to carry out the following checks.

How can you avoid being scammed by fake QR codes?

Preview the QR code link. The URL should appear on your phone when you scan a QR code. Make sure the URL seems legitimate and that it isn’t a misspelling of a real URL.

Check for tampering. If you’re scanning a QR code that’s in a public place, like a restaurant or a car park ticket machine, make sure the QR code doesn’t have a sticker on top of the original. If in doubt, try paying by a different method where possible.

Check the website. If you follow the QR code link, does the website seems professional. Low-quality images and typos are always signs of fake websites. Look for a lock symbol next to the URL or https:// in the URL to show theses are genuine.

When in doubt, contact the company. If you receive an unusual email or letter in the mail from a business with a QR code, contact the business to determine if the message is legitimate.

Never scan or open QR codes from unknown sources. Whether you’re approached online or in the street, don’t scan QR codes from people that you don’t know. And always lookout for “too good to be true” messages, such as gifts or free products if you scan their QR code.

If using a downloaded App to scan QR codes, make sure you obtain it from a trusted source such as Apple or Google Play Store. However most modern phones now have a built-in scanner anyway.

A further use of QR codes to defraud victims by criminals is known as “BRUSHING”. Typically, this is used to create false consumer reviews by sending out “gifts” to multiple recipients then using those names and addresses to create favourable consumer reviews in their name unknowingly.

A twist to this type of fraud however is to include a QR Code inside the package which claims to let you know who sent the “gift”.

NEVER, scan this QR code as it can potentially download all the personal and financial information on your phone including any bank account details if you have Banking Apps on your phone.

As ever, be vigilant, especially with QR codes received in emails.

Please feel free to share these messages with any vulnerable friends, relatives or neighbours

-------------------------------------------------------------------------------------------

If you have fallen for a fraud,

Report it to Report Fraud (formerly known as ACTION FRAUD) on 0300 123 2040 or via reportfraud.police.uk

Scam Text messages can be forwarded to 7726 to help phone providers take prompt action and block numbers that generate spam on their networks. You can also report Scam mobile calls by texting 7726 with the word “Call” followed by the fraudulent caller’s phone number.

Forward Fake Emails received toreport@phishing.gov.uk

If you think your bank account or personal banking details have been used fraudulently, then use the short phone number - 159 - to contact the Fraud Prevention Department of most major UK banks.

A person wearing boxing gloves

AI-generated content may be incorrect.

Reply to this message

Message Sent By
Michael Barbour
(Police, PSV, Economic Crime Unit – Fraud Protect’)