Warning over scam QR codes on parking meters in south of France

Drivers in Nice (Provence-Alpes-Côte d'Azur) are being warned to stay alert to scam QR codes on parking meters - which seek to steal bank account details as the user tries to pay for parking - in a scam that is increasing across France.

Authorities in the city issued the warning on July 15, and said it will lodge a formal complaint.

The scam QR codes are stickers that fraudsters place over real QR codes on the parking meters that invite users to pay for parking via the PayByPhone smartphone application. 

Normally, the user scans the QR code, and this takes them to a legitimate payment portal for their parking space.

However, the scam QR codes take the user to a fraudulent website - which often appears almost identical to the real one - that is designed to steal their payment and banking information. This is a method known as ‘phishing’ (hameçonnage in French).

The user not only fails to pay for their parking, but also falls victim to a scam and may have much more than the parking fee stolen from their bank account.

Read also: Scam alert: Watch out for fake QR codes in France 

Taking the scam ‘very seriously’

The City of Nice said that it is taking these phishing attempts "very seriously" and is working "actively to identify and remove the fraudulent QR codes". It is also stating its intention to lodge a complaint in order to take legal action against those responsible.

The authorities also warned users that they should only download the PayByPhone app via the official Apple Store (for iPhone) or Google Play store (for Android).

Similarly, drivers are warned not to scan QR codes on these meters, and instead navigate to the correct payment page in a different way. 

For example, most meters will also have an identification number that you can type into the app instead of scanning the QR code, or let you search for your parking space by location, again instead of using the QR code.

What if I fall victim to the scam?

In Nice, authorities have asked that anyone who spots what they believe to be a fake QR code, or anyone who has fallen victim to one, to report it to the city's parking department.

More generally, the Economy Ministry has recently issued advice for people in France on how to prevent identity theft and financial fraud, and what to do if you fall victim.

This includes:

• Staying alert to scam attempts and checking websites, apps, and addresses

• Only giving the minimum amount of personal data away whenever possible

• Check your bank statements regularly for evidence of fraudulent transactions

• Keep screenshots and other evidence if you believe you have been scammed

• Contact your bank as soon as possible if you believe you have fallen victim

• Cancel cards and/or ID cards immediately if you have shared the data

You can also contact the Banque de France and let them know you have been a victim of identity fraud, as they can check for any credits, debts, or unspent transactions in your name. You are also advised to contact the CNIL (Commission nationale de l'informatique et des libertés) to check if a new bank account has been opened in your name.

The France Victimes association can offer free help with lodging a complaint with the police, or your local public prosecutor. Call the association for free (on 116 006).

Free advice on your next steps is available by contacting the Ministry of the Interior's Info Escroqueries platform on 0 805 805 817 (free call).

Spread of QR code scams

The warning about the parking meters comes as QR code scams are spreading across France. They are increasingly being reported on everything from advertisements to restaurant menus, to electric car charging points.

Read also: Beware new scams involving QR codes in France
Read also: Warning over QR code scam with electric car charging in France 

Some seek to steal your payment details, but others secretly install malware onto your phone that may steal data or banking details later.

The most important thing to do before scanning a QR code is to check it is legitimate.

• If you are scanning a code from a public place (restaurant, shop window, etc) check that a fake code has not been glued on top of the original advert.

• When the QR code sends you to a website or download link, check the URL website address to make sure it is legitimate. To replicate an official website URL, scammers will misspell words or add hyphens to website names.

• Finally, check if the website itself is legitimate, particularly if it prompts you to pay or download something. 

Fraudsters are increasingly skilled at copying the look of official websites, but it is still usually possible to tell if a site is fake, by detecting errors, spelling issues, bad quality photos images, or incorrect URLs.