Fake QR codes on parking meters. Warning

The CSIRT (Computer Security Incident Response Team) of NASK (Scientific and Academic Computer Network – National Research Institute) warns against a new SMS campaign by fraudsters aimed at extorting data. Criminals impersonate the mObywatel application and inform about an allegedly taken out loan.

According to an example attack scenario, an SMS is sent to the future victim. Its content suggests that the victim's PESEL number was used to take out a cash loan. This message is intended to cause concern. A moment after receiving it, a fraudster may call you pretending to be a bank consultant.

NASK reminds that a real SMS regarding PESEL number protection services does not contain a reason for verification. It also warns against following the instructions of an alleged consultant, e.g. a bank.

“Send any suspicious messages to experts from the CERT Polska team for verification by sending them to the free number 8080,” he notes.

NASK experts also warn against phishing payment data using websites impersonating portals used to pay parking fees.

Criminals using this method stick fake QR codes on parking meters, which redirect potential victims to fake websites. In order to make the alleged payment, you must provide your payment card details.

NASK advises to always check the authenticity of the QR code on the parking meter. The correct codes are always on the official parking sign. If the code looks suspicious, e.g. stuck on another plate, do not scan it. To avoid fraud, you can use official applications of parking operators that allow you to make payments securely, without the need to scan QR codes.

Additionally, if you see suspicious or damaged QR codes, please inform the parking operator.

NASK also reminds us to be careful on Black Friday and Cyber ​​Monday. Fraudsters impersonate the websites of online stores and well-known platforms.

Any suspicious QR codes and SMS messages should be forwarded to experts from the CERT Polska team for verification.