Derbyshire Constabulary are warning motorists about bogus QR stickers that have been found in Derby car parks, and the dangers of using incorrect apps or sites to pay for parking.

In a message via their Derbyshire Alert email/text system, Derbyshire Constabulary’s Cyber Protect Officer Samantha Hancock offered a warning about the scams and offered advice to anyone who plans to park in the city or use parking apps.
Talking about her own experience with the QR stickers in the city centre car park, Sam said:
“As I parked in the Pay and Display car park in Crompton Street, Derby, I noticed QR stickers had been applied to the Pay & Display card/coin machine. THESE WERE SCAM CODES.
The actual display board outlines how you can pay for parking, it does not mention QR codes.”
This is a tell-tale sign, but for busy motorists who may be in a rush, or confused how to pay, these QR codes could seem like a genuine and easy way to pay for their parking session.
Sam continued:
“ALWAYS be alert when considering QR codes - NEVER use them if they appear to be stickers on machines, or stuck to information boards, rather than part of the official information board. Check that a QR sticker hasn’t been placed over the legitimate one."
Sam then warned of other parking scams:
“Also, if you intend to pay via an app, only ever search on your app store. DO NOT use Google or an equivalent internet search engine. Fake, similarly-sounding results could appear at the top of the search lists.
It’s a little known fact that sponsored ads appear at the top of search results – this merely means they have been paid for to appear in pole position, it does NOT mean they are legitimate!”
Covering both topics, Sam then spoke about how each scam works and what potentially happens to the victim:
“As we understand it, victims are being caught out by following fake QR codes or searching the web for parking apps and are encountering misleading third-party ads with legitimate parking app promotions. Believing they are providing card details to pay for parking, in actual fact, people are signing up for hidden subscriptions, rather than paying to park.
"Always check to see that your parking payment has been made by checking your card/account. Legitimate apps/sites/phone lines will result in a text or email confirming your parking payment and expiry time. If you find any additional payments taken, please contact your card issuer and report as many details as possible to www.actionfraud.police.uk.
" Check your emails regularly and seek advice if you are receiving notifications regarding unknown subscriptions.”
Although this post is from Derbyshire Constabulary, scams like these are happening across many areas of the UK. Indeed, Leicester City Council issued a warning of fake QR codes with links to a Russian domain back in September 2024.
Reporting
Report all Fraud and Cybercrime to Action Fraud by calling 0300 123 2040 or online. Forward suspicious emails to report@phishing.gov.uk. Report SMS scams by forwarding the original message to 7726 (spells SPAM on the keypad).
Comments