Cybercriminals use QR code phishing to steal banking data

Cybercriminals are increasingly utilizing a technique known as ‘quishing’—a combination of QR code and phishing—to steal banking data. This method involves using fraudulent QR codes that redirect users to fake websites mimicking official services.

Scammers often deploy these codes in physical locations by placing stickers over legitimate QR codes on parking meters, electric vehicle charging stations, or windshields. Once scanned, the victim is directed to a fraudulent site that requests sensitive banking information. This threat has been observed on parking meters in Marseille and various other French cities, as well as through fake traffic fine notices.