There has been a new fraudulent scheme in Ukraine related to the replacement of QR code in public places that allows the attackers to access citizens' banking data. The Cyber Police Department reports.
Fraudsters replace QR codes with official information plates or place their own in crowded places. When the user scans such a code, it gets to a fake site that mimics a legitimate online service. If a person enters his payment data there, the attackers receive access to his account.
Most often, such fake QR codes are placed:
- on parking automatics;
- in transport and at stops;
- on tickets or entrances to events;
- on bank or state information plates;
- in places of collecting charitable contributions.
It is almost impossible to distinguish a qualitatively fake code from a real, so it is important to follow the safety rules.
Cyber Police advises to follow the following recommendations:
- Only scan reliable QR codes -avoid casual postcards, advertisements or stickers in public.
- Check the stickers - pay attention to the possible signs of substitution: additional layer of paper, uneven edges, excellent font.
- Preview links -most smartphones allow you to see the URL before you switch to the QR code.
- Analyze the web address -even if the site looks convincing, check the domain name (official services do not contain unnecessary characters or errors in the title).
- Make sure the secure connection (https: //) - if the site does not have a security certificate, do not enter any data.
- Do not enter your bank information unnecessarily -avoid entering PIN or CVV on unfamiliar sites.
- Use virtual or temporary online payment cards -in the event of data leakage, it will help to avoid financial losses.
If you have accidentally entered your banking data on a fraudulent site immediately:
- Contact the bank and block the card;
- change your passwords from online banking;
- Tell the cyber police through an official site or hotline.
Experts emphasize that fraudsters are constantly inventing new ways of lining money, so you should be vigilant and check each financial transaction.