3750DD9C-4A12-4531-B97D-1DFFEE2C4F4D


Quishing (Scam QR Codes)

Fraudsters create QR Codes that direct you to a fake website that appears to be genuine. The Fake website is designed to steal your money/identity by obtaining information and/or infect your device with malware.



What is a QR Code?

A QR Code is a two-dimensional barcode that directs you to a website when scanned using your smartphone camera. QR codes are used for different purposes, some examples of when QR codes are used are:

  • ordering food and drink at restaurants,
  • to pay a parking meter,
  • for advertising (leading to the company’s product on their website),
  • to facilitate the return of goods,
  • to download a new APP on your TV.

What is Quishing?

Quishing is when a fraudster creates a QR code that directs you to a fake website. The fake website will look genuine and will ask you for personal and/or financial information, it could also infect your phone with malware. The fraudster will use the information provided to attempt to steal your money and/or identity. Some examples of what could happen with your stolen information are; the fraudster could attempt to take over your bank accounts, use your card details to make purchases, or to apply for finance in your name.

Quishing can be seen as an evolution of Phishing (Fake emails) and Smishing (fake text messages). The same rules apply when protecting yourself from Quishing fraud. To protect yourself from Quishing fraud, please follow these rules:

  • Do not scan QR Codes that you do not trust.
  • Instead of scanning the QR Code, search for the company on your browser.
  • Check the QR Code URL before opening it to search for signs of a suspicious link:
    • Ensure the website uses HTTPS,
    • Ensure there are no spelling mistakes,
    • Ensure the website matches the company it is from.
  • Don’t download software that you don’t understand.
  • If it doesn’t feel right, trust your instincts, and don’t provide your information.
  • If you think you have clicked on a fake QR code, call us as soon as possible.

We encourage you to #Take Five by following the below steps:

  1. Never disclose security details, such as your PIN or full banking password
  2. Don’t assume an email or phone call is authentic
  3. Don’t be rushed – a genuine organisation won’t mind waiting
  4. Listen to your instincts – you know if something doesn’t feel right
  5. Stay in control – don’t panic or make a decision you’ll regret.

take five logo

To report fraud, you can contact us 24 hours a day, 7 days a week on the Freephone Emergency Contact Numbers listed below.

Emergency Contact Numbers

You can contact us 24 hours a day, 7 days a week on:

Calling from UK

Freephone: 0800 121 7790 (personal customers)

Freephone: 0800 032 1288 (Business On Line and Global Market Customers)

Calling from ROI

Freephone: 1800 946 764 (personal and business)

Calling from Overseas

Not Freephone: 00353 567 757 007

Please note: If we need to contact you about a potential fraud on your account, we will do this via a secure channel including, but not limited to, SMS or email.