Fraudulent schemes related to the substitution of QR codes displayed in public places have intensified in Ukraine. This is reported by the Cyber Police Department of the Cybercrime Prevention Unit in Kyiv. Malefactors use phishing websites that imitate real online services to steal citizens’ banking information.
This is reported by Київ24
How the new fraudulent method works
According to representatives of the cyber police, criminals substitute official QR codes placed on information boards or other public objects. By scanning such codes and landing on counterfeit websites, users risk losing access to their bank accounts and having their funds stolen. This scheme is most often used in places where people actively use QR codes for quick payments for parking, public transport fares, and other services.
«Therefore, the main advice is to always check the website address before entering any confidential information»
It is important to note that recognizing a counterfeit code or website can be very difficult, as the appearance of the forgery often does not differ from the original. Therefore, experts advise being particularly cautious when using QR codes that are placed on random stickers, flyers, or advertisements.
How to protect yourself when using QR codes
The cyber police recommend scanning QR codes only from reliable sources and carefully inspecting the stickers for possible signs of substitution, such as uneven edges, an additional layer, or different fonts. It is also helpful to use the link preview feature on your smartphone, which allows you to see the URL before proceeding. It is important to pay attention to the web address after following a QR code: even if the site seems convincing, any differences in the domain may be a sign of fraud.
Additionally, do not enter banking information on unfamiliar websites or without necessity. If you suspect a QR code or website, it should be reported to the establishment’s administration, support services, or law enforcement. Experts particularly recommend paying attention to emails supposedly from official institutions that offer to collect funds to support the Armed Forces of Ukraine. According to representatives of the cyber police, assistance to our defenders must be genuine, not fake, as such pseudo-fundraising harms the military more than the enemy.