Fake QR Codes Are Targeting Everyday Canadians
If you've used a Bike Share bike or fed quarters into a parking machine lately, you might want to think twice before scanning that QR code. A new wave of scams using counterfeit QR codes — a tactic sometimes called "quishing" — has been spotted on Bike Share bicycles and parking pay stations in Mississauga, and Canadian security experts say it's a trend worth watching coast to coast.
The scam works by placing fake QR code stickers directly over the legitimate ones. When an unsuspecting user scans the code expecting to unlock a bike or pay for parking, they're redirected to a fraudulent website designed to steal payment information or login credentials.
How the Scam Works
The fake pages are often convincing imitations of real payment portals. They may ask for your credit card number, billing address, and even your email and password. Because people are usually in a hurry — trying to catch a ride or beat a parking meter — they may not stop to examine whether the site looks slightly off.
Security experts note that the stickers are sometimes placed with enough care that they look completely legitimate at a glance. The telltale signs? Look for QR codes that appear slightly raised or have edges that don't line up with the machine's design. If the website you're taken to doesn't match the official service provider (like Bike Share Toronto or your city's official parking portal), close the browser immediately.
What to Do Instead
If you're renting a Bike Share bike, use the official app rather than scanning codes on the bike itself. For parking, many cities offer official apps — in Ottawa, for example, the Green P and HonkMobile apps are safer alternatives to scanning codes on unfamiliar machines.
Here are some quick tips to protect yourself:
- Inspect before you scan — look for raised edges or misaligned stickers
- Check the URL — legitimate services use recognizable, secure domains (https://)
- Use official apps — download from the App Store or Google Play, not from a QR code
- Trust your gut — if a payment page looks unfamiliar or asks for more info than usual, back out
Why This Scam Is Spreading
QR codes surged in popularity during the pandemic as a contactless alternative to menus, ticketing, and payments. That widespread adoption has created a perfect opportunity for fraudsters, who know that Canadians have grown comfortable scanning codes without a second thought.
The Canadian Anti-Fraud Centre has flagged QR code phishing as a growing concern across multiple sectors, including retail, transit, and parking. Similar incidents have been reported in cities across the U.S. and Europe.
Report It If You See It
If you spot a suspicious QR code sticker on public infrastructure, don't scan it — report it to the company or city department responsible for the equipment. You can also report suspected fraud to the Canadian Anti-Fraud Centre at 1-888-495-8501 or online at antifraudcentre.ca.
Staying alert takes just a few extra seconds, and it could save you a major headache.
Source: CBC News
