A new alert has been issued by Action Fraud, warning about quishing, a form of phishing where a fraudulent QR code is scanned, designed to steal personal and financial information. The warning encourages people to stay vigilant and double check QR codes to see if they are malicious, or have been tampered with, before scanning them online or in public spaces.

Claire Webb, Acting Director of Action Fraud, said: 

“QR codes are becoming increasingly common in everyday life, whether it’s scanning one to pay for parking, or receiving an email asking to verify an online account. However, reporting shows cyber criminals are increasingly using quishing as a way to trick the public out of their personal and financial information.

“We’re urging people to stop and check before scanning QR codes, to avoid becoming a victim of quishing. Look out for QR codes that may have been tampered with in open spaces, or emails and texts that might include rogue codes. If you’re in doubt, contact the organisation directly. You can follow our advice on quishing, on our website at www.actionfraud.police.uk to help protect yourself.”

Action Fraud can reveal that quishing happens most frequently in car parks, with criminals using stickers to tamper with QR codes on parking machines. Quishing also occurred on online shopping platforms, where sellers received a QR code via email to either verify accounts or to receive payment for sold items.

Reports also showed phishing attacks were taking place impersonating HMRC, or other UK government schemes, targeting people with QR codes designed to steal personal and financial details.

What can you do avoid being a victim of quishing?

QR codes used in pubs or restaurants are usually safe to scan.

Scanning QR codes in open spaces (like stations and car parks) might pose a greater risk. Check for signs that codes may have been tampered with (usually by a sticker placed over the legitimate QR code). If in doubt, do not scan them: use a search engine to find the official website or app for the organisation you need to make a payment to.

If you receive an email with a QR code in it, and you’re asked to scan it, you should be cautious due to an increase in these types of ‘quishing’ attacks.

Finally, we recommend that you use the QR-scanner that comes with your phone, rather than using an app downloaded from an app store.

If you receive a suspicious email, report it by forwarding it to phishing@report.gov.uk

Find out how to protect yourself from fraud: https://stopthinkfraud.campaign.gov.uk

If you’ve been a victim of fraud, report it at www.actionfraud.police.uk or by calling 0300 123 2040. In Scotland, contact Police Scotland on 101.

West Yorkshire now has an Independent Road Victim Advocate (IRVA).

The new position will offer face-to-face help following referrals from Police Family Liaison Officers (FLOs), who have first contact with road victims.

It means families of people killed or seriously injured on the county’s roads, as well as people who have been seriously injured themselves will be able to access:

• Emotional support.
• Practical support.
• Help understanding procedures, such as criminal prosecutions or court cases.
• Support seeking and using lawyers.
• Family support, for example with children or the elderly.
• Injury rehabilitation.

Jan Vekaria, from Shipley, received support after losing her husband, Parv, in a car crash caused by a dangerous driver on the wrong side of the road.

Jan said: “It made a massive difference, I couldn’t have got through this without Brake.

“I remember the first few visits and I probably just cried a lot. I just needed someone there who understood and was really sympathetic.

“My support worker was so good at helping me by explaining what was going to happen. She helped me so much and I’ve been able to continue to speak to her.”

Road victims face many complex practical procedures after a crash, in addition to ongoing trauma from the incident itself.

Victims may have to identify a loved one’s body, attend a criminal or inquest hearing, get a loved one’s property and clothing returned, understand how a collision happened, and provide a Victim Impact Statement in court.

The new position is managed by the road safety charity Brake and has been funded by the West Yorkshire Vision Zero Partnership.

Alison Lowe, Deputy Mayor for Policing and Crime and Chair of the West Yorkshire Vision Zero Board, said: “I know first-hand what it’s like to lose a loved one in these circumstances.

“The pain and devastation is immeasurable and we must do all we can to support people affected by these tragedies.

“I am pleased we have been able to secure the new role which will make a real difference in our communities as we work together to reduce road death and serious injuries to zero.”

Ross Moorlock, CEO at Brake, the road safety charity, said: “We are so grateful to Jan for sharing her experience and helping people understand how the support she received from Brake has helped her.

“We know that the right support at the right time can change the course of someone’s life. For Jan, being able to access specialist, trauma-informed support delivered by Brake has made such a difference. We know that there are many other families out there who need our help after a road death or serious injury, and we are here to support them in their darkest and most difficult times.

“We are proud to be partnering with the West Yorkshire Vision Zero team and we look forward to working with the team to support families in need. Their support for the plight of road victims is very evident and we are thankful that they have chosen Brake to provide support for families in West Yorkshire, through a local caseworker.”

To find out more about the support options available, visit https://www.westyorks-ca.gov.uk/vz-useful-links.