🛡️ netzmeldung.com
DE
Risk: Elevated

"Quishing": Fake QR codes in emails, letters, public transport and road traffic

Category: Consumer warnings · Published: 13/07/2026 · Last updated: 22/07/2026

Summary

What is this about? Current warning from Verbraucherzentrale – Phishing-Radar. See linked source for details.
Who is affected? Consumers in Germany.
How high is the risk? Elevated

Why is this warning issued?

This warning was included because it is based on a report from Verbraucherzentrale – Phishing-Radar. It is intended to protect other users from this type of fraud. The assessed risk is elevated.

How the scam works

  • Criminals distribute fake QR codes – for example in alleged bank letters, as overlaid codes on parking meters and charging stations, as fake traffic tickets, or as posters in buses and trains.
  • They place the codes where people scan them quickly and without thinking, for example under pressure (traffic tickets) or in everyday situations (shops, public transport).
  • Anyone who scans the code is redirected to a fake website that looks genuine.
  • On the site, those affected are asked to enter personal data, login credentials, or make payments.
  • Using the stolen data or the money paid, the criminals steal money or misuse the identity.

How to recognise it

  • QR codes in unsolicited letters allegedly coming from a bank
  • Overlaid or stuck-on QR codes on parking meters and charging stations for electric cars
  • Traffic tickets or parking fines that are supposed to be paid only via QR code
  • Posters or stickers with QR codes in buses, trains, and at stops
  • QR codes that prompt scanning without any apparent reason
  • Websites that, after scanning, ask for bank details, login, or personal information
  • Prize without participation or a "free" offer with a data request
  • Advance payment demanded for "fees/taxes"

How to protect yourself

  • Do not scan QR codes in public places and in unsolicited letters without checking them first.
  • Check stickers on parking meters and charging stations: if the code appears to be stuck on or overlaid, do not use it.
  • If you receive a traffic ticket only via QR code, verify the claim directly with the issuing authority.
  • Do not enter bank or login data on a page you reached via a QR code without carefully checking the address (URL).
  • Preserve evidence (for example, a photo of the overlaid code or of the letter) before removing it or leaving the location.
  • Report the incident to your Verbraucherzentrale and, if necessary, to the police.

What you should never do

  • Do not blindly scan QR codes on parking meters, charging stations, in buses or trains.
  • Never pay directly via a QR code if you have not verified the claim beforehand.
  • Do not enter bank details, passwords, or personal data on pages you reached via a QR code from letters or traffic tickets.
  • Do not scratch off or destroy genuine stickers or codes on machines before you have taken a photo as evidence.

Frequently asked questions

Do I have to pay a traffic ticket that I only received via QR code?

Not without checking. Verify the claim directly with the issuing authority (city or public order office) before paying anything.

How do the criminals know that I was at a charging station, for example?

They often do not. The fake QR codes are simply placed publicly in many locations, in the hope that someone will scan them.

I scanned a QR code and entered data – what now?

Change affected passwords immediately, inform your bank, and monitor your accounts. Report the incident to your Verbraucherzentrale and, if necessary, to the police.

How can I tell if a QR code has been overlaid?

Look out for stickers or films that do not match the surroundings, different sizes, or traces of adhesive. When in doubt, do not scan.

Should I remove or cover a suspicious QR code?

First take a photo as evidence, then you can remove it or report the location to the operator, the Verbraucherzentrale, or the police.

Affected data

Scam type
Phishing

Comments

No comments yet. Registered users can share their experiences.

Related warnings

Original source

Find more information in the original source.

Verbraucherzentrale – Phishing-Radar ↗

Update history

  • 22/07/2026Description updated
  • 13/07/2026Warning added from an official source