Drivers have been urged to be particularly vigilant when parking their car as a new type of scam that could have a devastating impact grows in popularity.
In many car parks, the traditional pay and display machines are being replaced with signs featuring QR codes, which drivers can quickly scan with their phone and pay for their parking online.
Whilst the system is much more efficient and reliable, the vehicle leasing company Ayvens UK highlighted that some scammers are taking advantage of it.
They warned: “Paying for public charging and parking has become much easier recently. Membership-free access is mandatory for all rapid charge points, while some networks have sites offering similar ad-hoc payments for slower units.
“However, some QR codes linking to authorised payment portals are being replaced, directing drivers to sites that steal their bank details.”
In a bid to steal money, criminals are creating their own QR codes and sticking them onto the signs of car parks, along with accurate depictions of the parking company’s website.
Motorists who fall for the scam are not only giving their bank details to thieves, but can also receive a fine of up to £100 from the parking company, who never received a payment.
One site that was recently affected by the scam was Ipswich Street car park in Stowmarket, Suffolk, where one motorist tried to pay 90p and ended up being charged £39.
As reported in the Stowmarket Mercury, a spokesperson for Mid Suffolk Council highlighted that motorists should use other methods to pay for parking, such as directly going to the council’s website.
They explained: “Our parking team are currently checking all council-owned car parks and removing any false QR codes.
“Payment should only ever be made at the machine itself, via the official MiPermit App, or on the council website.”
Drivers who do need to scan a QR code were advised by Ayvens to make sure the company’s website matches the car park’s name perfectly and has an SSL certificate.
They advised: “Keep an eye out for alterations to car park signage and look for misspelt company names in web addresses. A genuine payment portal will also have what’s called an SSL certificate – a digital authentication of the company’s identity and the site’s ability to encrypt your data.
“An SSL-certified site will show a padlock symbol on your browser’s address bar, while the URL will begin with “https://” instead of “http://”.”
