The Parking Sticker That Could Empty Your Bank Account

A small sticker placed on a parking meter can now provide criminals with everything they need to target an unsuspecting driver. Fake QR code parking scams, commonly known as “quishing”, have already appeared in Northumberland and other parts of the UK, raising concerns for motorists across Newcastle and the wider North East.

The scam exploits a routine moment. A driver parks, scans what appears to be an official payment code and enters their bank details. However, the money does not reach the council or car park operator. Instead, the website belongs to fraudsters who may take a payment, steal the card information or use the details in a second, more damaging scam.

How the fake parking QR code scam works.

Criminals usually print a QR code sticker and place it over genuine payment instructions on a parking machine or sign. Scanning it opens a convincing copy of a legitimate parking website, often complete with familiar colours, logos and vehicle registration fields.

The requested parking payment may be only a few pounds, which makes the page feel believable. The greater danger is that the criminals now possess the victim’s card and personal information. A driver may also receive a genuine penalty charge because no valid parking session was purchased.

Northumberland County Council previously warned motorists after fraudulent QR codes were discovered in council car parks. This establishes a clear local connection, although it does not mean every QR code or North East parking location is unsafe.

Why North East drivers may be vulnerable.

Newcastle City Council began moving its council-run car parks and on-street spaces towards cashless payments in 2023. Drivers were directed to card payments or the PayByPhone service, with the change introduced gradually as machines were upgraded. The council said the system would improve efficiency and reflect changing customer preferences. Newcastle City Council

Cashless parking is convenient, but unfamiliar apps, websites and payment systems can create uncertainty. Fraudsters benefit because drivers are often in a hurry and expect to encounter digital payment instructions. A professionally printed sticker can therefore appear entirely ordinary.

The scam is also cheap to attempt. One criminal can produce numerous QR stickers and place them across several car parks without needing to interfere with the payment machines themselves.

What the national figures reveal.

Action Fraud received 784 reports involving fraudulent QR codes between April 2024 and April 2025, with reported losses approaching £3.5 million. It also identified car parks as the most frequent setting for quishing. Action Fraud alert

That works out at a rough average of almost £4,500 per report. However, this should not be treated as the typical parking scam loss because the figures cover different kinds of QR fraud and some victims lost substantially more than others.

The true number may also be higher. Some people may not realise that their details were stolen through a QR code, while others might contact their bank without making a formal fraud report.

Is creating a fake QR code illegal.

A QR code is legal technology, but using one dishonestly to obtain money or personal information can amount to fraud by false representation under the Fraud Act 2006. The offence covers knowingly making a false or misleading representation with the intention of making a gain or causing another person a loss.

A fraud conviction on indictment can carry up to 10 years in prison, a fine, or both. Producing or supplying an item intended for use in fraud can also be prosecuted under the Act. Fraud Act 2006

Victims should contact their bank immediately, freeze or cancel the affected card and report suspicious transactions. The incident should also be reported through the UK’s official fraud reporting service and to the council or operator responsible for the car park.

How motorists can protect themselves.

Before scanning, check whether the code is a separate sticker, has raised edges or appears to cover another label. Preview the web address and do not continue if the spelling, branding or domain looks unusual.

The safest option is to download the named parking provider’s app directly from an official app store, manually visit its verified website or use the telephone number printed on the original sign. A padlock symbol alone does not prove that a website is genuine.

If a suspicious QR code is found in a Newcastle or North East car park, photograph it without scanning it and tell the operator. A quick report could prevent the next driver from handing their bank details to a criminal.

Share your comments below.

Have you spotted a suspicious parking QR code in Newcastle or elsewhere in the North East?