OCU warns of QR code scam targeting drivers and bank accounts

The Spanish consumer organization OCU has issued an urgent alert about a new fraud called “QRishing.” Criminals place false QR stickers on vehicle windshields, often over documents that look like official traffic fines or notifications from the Dirección General de Tráfico. When a driver scans the code, the phone is redirected to a counterfeit website that imitates a public agency or bank, where personal and banking details are requested. The data are then used to empty the victim’s account or make unauthorized purchases.

OCU advises motorists to never scan QR codes they did not expect, to verify the URL before entering any information, and to report suspicious stickers to the authorities. Checking the legitimacy of the source and refusing to provide credit‑card numbers or PINs can prevent the scam from succeeding.