England fans warned over common QR code scam during Euros that could cost them thousands

Getting served can prove challenging, particularly during the half-time rush, with many revellers opting to scan their table’s QR code to get food and drinks delivered directly to them.

However, savvy fraudsters frequently try to take advantage of customers ordering through digital menus, by placing fake QR codes over the genuine article.

This form of phishing, often referred to as ‘quishing’, results in the customer being directed to a phony website, where they enter their personal information for the scammer to see.

To prevent falling victim to this type of scam, Marc Porcar, CEO of QR Code Generator, has shared his top tips for spotting ‘fake’ QR codes and what to do if you suspect one isn’t legitimate.

Closely inspect QR code stickers

Inspect the QR code for signs that a fake has been placed over a preexisting one. Look for peeling edges, weird bumps in the material and anything else that generally looks suspicious.

If the corners of the sticker are peeling and it appears there is something underneath, this can be a surefire red flag.

If you suspect that your table’s QR code isn’t legitimate, always ask a staff member from the establishment before ordering.

Check the URL

When you scan a QR code, your phone allows you to preview the website’s link before you click to visit the site. Use your judgement to assess the website URL and whether it matches up with the establishment’s actual website.

Some scammers will set up a copycat website using a domain name that looks similar but is slightly different to the real thing. For example, the imposter URL could be ‘https://www.pubname.net’ when the genuine website is ‘https://www.pubname.co.uk’.

Also make sure that the website you are visiting on your mobile browser has a padlock symbol next to it, and that the URL begins with ‘https://’ rather than just ‘http://’.

This ensures that the website is encrypted with a Secure Sockets Layer (SSL) certificate. Some phishing websites now also use SSL protection in an attempt to trick visitors, so this is a risk that should be taken into consideration when visiting the site.

Suspicious website content

If you click through to a website from a QR code and the webpage content looks unusual or things feel out of place, this can be a sign you are not ordering through a legitimate channel.

Some telltale signs that you are on a phishing website include spelling mistakes, lack of correct capitalisation, text being misaligned, and logos and graphics appearing pixelated or out of date.

Asking for too much personal information

When paying online, establishments should only require your email address to provide confirmation of your order, your card number, its expiry date and the last three digits on the back of your card (CVV/CVC).

If the site is asking for additional information such as your home address, phone number or even your card’s pin number, this can be sign that it isn’t legitimate.

Offers too good to be true

Websites that offer things such as free money or products could be an indication that the QR code is not legitimate. If you scan a code and are confronted with deals that seem too good to be true, they probably are.

Check whether there is a dedicated ordering app

Many chain bars and pubs, such as Greene King and Wetherspoons, have their own dedicated app for ordering food and drink to your table. Where possible go through the establishment’s official website, which will redirect you to their self-order app from the Apple or Google Play store. If you scan a QR code and it doesn’t redirect you to the app, you could be dealing with a phishing website.

Marc Porcar, CEO of QR Code Generator, said, “The Euros are a fantastic opportunity for people to come together to cheer on their national team.

“Unfortunately, scammers see these events as an opportunity to take advantage of people, especially those who have been drinking and may be less vigilant than usual. It’s important that people continue to exercise caution when scanning QR codes, to prevent falling victim to this type of phishing scam.”

Credit https://qrfy.com