The Cybercrime Bureau of the Police Headquarters, FinCERT.pl – the Banking Cybersecurity Centre of the Polish Bank Association, and the Polish Chamber of Information Technology and Telecommunications warn smartphone users against scanning QR codes on stickers that have recently been unlawfully placed on ATMs.
Scanning such a QR code may expose the phone’s owner to the launch of an application that sends Premium SMS messages without the user’s knowledge.
These QR code stickers are placed without the consent or knowledge of the owners of the ATMs, namely banks and ATM networks, and are in no way connected with any banking services.
Why should you not scan these codes?
By misleading people with false information, such as claims about a possible prize, criminals manipulate potential customers who, if they scan the QR code on the sticker, will in this particular case be redirected to a Premium SMS service. Activating the service will result in the unsuspecting user being charged high fees for enabling it.
It should also be stressed that QR codes may not only initiate the stated scam; they may also be used to substitute fraudulent platforms intended to obtain logins and passwords for email services, social media, electronic banking and public services, as well as to infect smartphones with malicious software.
What do experts recommend?
The Cybercrime Bureau of the Police Headquarters, the Polish Bank Association and the Polish Chamber of Information Technology and Telecommunications recommend using this functionality with caution, pointing out that users should avoid scanning QR codes of unknown origin made available in public places.
If a smartphone user falls victim to a crime, they should immediately notify the service provider, namely the bank and/or telecommunications operator, and report the suspected crime to a police station.