Contents
Fraudsters use QR codes with an integrated company logo to convey false security to their victims.
QR codes offer companies the opportunity to integrate their logo in the middle. This is what scammers take advantage of. The cyber crime police of the Zurich cantonal police are currently warning of this new scam.
“The fraudsters generate a QR code and copy the logo of a well-known company or an online marketplace into the advertising field in the middle of the code,” says Kenneth Jones, media spokesman for the Zurich cantonal police. This gives the impression that the code actually comes from this company or platform. “They then need these fake QR codes for various forms of fraud.”
Fake invoices from companies
For one thing, the scammers would send out invoices on behalf of these companies. The QR code leads to a fake, but deceptively real-looking website of this company. If a victim pays this bill, the money flows into the pockets of the cybercriminals.
Supposed buyer on internet marketplace
Another method of fraud is for the scammers to contact a seller via an online sales platform and feign interest in buying, explains Kenneth Jones: “Once the sales formalities have been negotiated, they send the potential victims a QR code with the
supposed logo of the platform to complete the sale.” The code leads to a fake website. “The truth is, they’re trying to get the victim’s credit card details and payments.”
If the phishing is successful for the scammers, the credit card will be charged immediately. The victims receive a security code via SMS, which they are asked to enter on the fraudulent website. This allows scammers to bypass two-factor authentication.
Anyone who has disclosed their data or made a payment should inform their credit card or financial institution immediately and have the credit card and access data blocked. Those affected should then report it to the police.