Warning about quishing: scam with fake QR codes in the Harz!
In the Harz region, the police warn against fraud at parking machines using fake QR codes. Security measures are urgently needed.

Warning about quishing: scam with fake QR codes in the Harz!
The Harz is very popular as a popular destination among residents, holidaymakers and day-trippers. But that joy could be jeopardized by a new scam. In the cities of Bad Harzburg and Goslar, local police authorities are warning of a fraudulent scam that is particularly common in parking lots. More and more cities have introduced app parking to make everyday parking easier. Parking machines have now also become the target of criminals who operate with fake QR codes, such as news38.de makes clear.
The fraudsters simply cover the original QR codes on the machines with deceptive labels. If you scan this manipulated code, you will be taken to a fake website that requests personal information such as credit card number and vehicle registration number. An example of this are well-known incidents in cities such as Hanover, Celle and Cologne. This scam, known as “quishing,” combines the worlds of QR codes and phishing and is harder to detect than classic methods because it seems completely harmless at first glance rnd.de.
How does the scam work?
The process is extremely simple and effective:
- Ein gefälschter QR-Code wird über den originalen Code geklebt.
- Durch einen Scan wird der Nutzer auf eine betrügerische Webseite geleitet.
- Dort gibt er unwissentlich sensible Informationen preis.
- Das Geld wird daraufhin sofort abgebucht.
A particularly bad case was recently reported by a driver in Goslar who lost a four-digit sum after scanning a QR code computerbild.de confirmed. To protect yourself from such incidents in the future, the police recommend always being skeptical about stickers on parking meters and especially keeping an eye on removable stickers.
Protective measures and recommendations for behavior
What can you do to protect yourself? Police and security experts recommend the following precautions:
- Öffnen Sie die Park-App manuell und scannen Sie keine QR-Codes direkt.
- Verwenden Sie Apps nur aus offiziellen App-Stores.
- Wenn möglich, nutzen Sie Bargeld.
- Deaktivieren Sie das automatische Öffnen von QR-Codes in Ihrer Kamera-App.
- Verwenden Sie spezielle QR-Scanner, die die Zieladresse vor dem Öffnen anzeigen.
If you do fall victim to a quishing attack, you need to act quickly: block your credit card immediately via the central blocking emergency number (116 116), inform your bank and report it to the police. It is also advisable to monitor your account for unauthorized withdrawals to prevent further damage.
The police are currently carrying out checks at parking meters and securing suspicious QR stickers. It remains to be seen how effective these measures will be in the long term. In the age of digitalization and smartphone apps, it is essential to remain vigilant and aware of the dangers.