QR SCAM EPIDEMIC Strikes Consumers!

A new wave of “quishing” scams has cost UK consumers over £3.5 million, exploiting the widespread use of QR codes to steal sensitive data.

At a Glance

  • Losses from QR code scams in the UK exceed £3.5 million
  • Fraudsters redirect victims to fake websites via “quishing” tactics
  • Incidents surged in 2023, especially in public spaces
  • Regulators and banks are urging stronger consumer protections

The Rise of Quishing

The so-called “quishing” scam, a blend of QR codes and phishing tactics, is rapidly emerging as a major financial threat in the UK. By placing fake QR codes on parking meters, restaurant menus, and other common touchpoints, scammers lure unsuspecting users to fraudulent websites that harvest personal and financial information.

Authorities estimate that UK victims have already lost more than £3.5 million through these schemes. The scam’s success hinges on the fact that consumers often struggle to differentiate between legitimate QR codes and doctored versions, giving fraudsters a potent tool to bypass traditional awareness campaigns around phishing emails and texts.

Watch now: QR code ‘quishing’ scams up 14-fold in five years (UK) 11/Apr/2025

Stakeholders on Alert

Consumers remain the primary targets, particularly those unfamiliar with QR security risks. Banks and businesses that deploy QR codes are also facing scrutiny, as they come under pressure to strengthen protections and reassure customers.

The Financial Conduct Authority has begun issuing warnings, while consumer advocacy groups like Which? are calling for wider awareness campaigns. Industry experts stress that businesses must audit their QR practices and implement verification tools to prevent tampering. Regulators are also weighing whether new compliance standards are necessary to keep pace with these evolving threats.

Responses and Future Risks

Public warnings have intensified as reports of quishing grow, with incidents multiplying more than fourteenfold in the past five years. Fraud investigators are working to identify networks behind the scams, but experts caution that fraudsters are likely to remain a step ahead by constantly adapting their tactics.

Some proposed solutions include anti-fraud scanning technologies, consumer education programs, and more rigorous monitoring of QR deployments in public spaces. However, the rapid rise of quishing underscores how quickly scammers can exploit everyday technologies for financial gain. The challenge for regulators and businesses will be sustaining consumer trust in QR systems while closing off vulnerabilities that criminals are now exploiting at scale.

Sources

FCA

Which?

QR Code Scam Warning: Quishing