When it comes to stealing money in the easiest way possible, scammers are full of ideas. Unfortunately, they always seem to have a slight edge over law enforcement, who initially can only gather victim testimonies to uncover new methods.
This is why we are hearing more and more about "quishing", which is essentially "phishing" through QR codes. Hence the "q". As a reminder, phishing involves obtaining your personal data through deception, such as your banking information, by leading you to a fraudulent website that closely resembles a legitimate one. In the case of quishing, the QR code you scan will lead you into the hands of a scammer. And these scammers are increasingly targeting electric vehicle charging stations!
The modus operandi:
If you drive an electric vehicle, you probably know that accessing many public charging stations requires scanning a QR code with your smartphone. This then directs you to the operator’s website where you log in and enter your banking details to make a payment. Otherwise, you cannot start charging.
It is precisely these QR codes that scammers are replacing with fake ones, which they stick on top, directing you to a fraudulent website. From there, all the information you enter will be in their hands and will be used to extract money from you. By then, it’s already too late!
Some tips to avoid quishing:
Victims of these scams usually do not realize anything at the moment. But upon reaching the fraudulent website, the charging point will not be unlocked, making charging impossible. However, the bank account will still be debited.
There are tricks to avoid falling into the trap. Firstly, be vigilant and make sure that the QR code you are about to scan is not a sticker stuck over an existing QR code. If it is, it’s a bad sign. Another option is to use recharge operator cards that allow you to unlock the charging stations without QR codes, avoiding the issue.
While Europe should mandate card payment terminals for fast charging stations over 50 kW to simplify the user experience, the lower power stations, especially those in urban areas, will remain vulnerable to such scams.
Remember to always stay alert and take precautions to protect your data and financial information while using charging stations to avoid falling victim to these scams.