Trading Standards Warning - QR Code Scams

26th October 2023

Police Scotland has released new guidance on avoiding scams linked to QR Codes - square barcodes that a smartphone camera can scan and read to provide quick access to a website or app.

QR codes have become increasingly popular as they offer a contactless way to access information and pay for services.

However, scanning a scam QR code could lead you to malicious websites that gather your payment and personal details. It could also allow scammers to access other functions and apps on your phone.

One recent example involved scam QR codes being sent via emails which appeared to be from HMRC.

HMRC advise that they will never send you a QR code. If you receive a QR code that appears to be from them, it is a scam.

How to Avoid

Advice from Police Scotland:
Never scan a QR code from an unfamiliar or unexpected email. If the message appears to have been sent by a company or organisation, visit their legitimate website to make a payment or update details rather than scanning a code.

Be extremely wary if a QR code takes you to a site that asks for personal information, login credentials or payment.

If you receive a QR code from a trusted contact via email, confirm via a separate medium such as text message or voice call that the message is legitimate

Scam messages will often have a sense of urgency and will appeal to your emotions to try and convince you to take action quickly
Review the preview of the QR code's URL before opening it to see if it appears legitimate. You can do this by opening your mobile device camera and pointing this at the QR code. This will identify the webpage link and provide the site address the code will take you to.
Make sure the website uses HTTPS rather than HTTP, doesn't have obvious misspellings and has a trusted domain. Don’t click on unfamiliar or shortened links.

Find out more
Advice from Police Scotland via CyberScotland: www.cyberscotland.com/preventing-quishing-attacks/
HMRC: www.gov.uk/guidance/identify-hmrc-related-scam-phone-calls-emails-and-text-messages
Get Safe Online: www.getsafeonline.org/personal/articles/qr-codes
Advice from McAfee: www.mcafee.com/blogs/mobile-security/be-on-the-lookout-for-a-new-wave-of-qr-code-scams/

General Advice on Avoiding Scams
Advice Direct Scotland: www.consumeradvice.scot/knowledge-centre or call 0808 164 6000
Citizens Advice Scotland: www.citizensadvice.org.uk/scotland/consumer
Police Scotland: www.scotland.police.uk/advice-and-information/scams-and-frauds
Financial Conduct Authority: www.fca.org.uk/consumers/protect-yourself-scams
Neighbourhood Watch Scotland Alerts: www.neighbourhoodwatchscotland.co.uk
Which?: www.which.co.uk/consumer-rights/scams
Age Scotland: www.ageuk.org.uk/scotland/information-advice/money-matters/scams/