Live data from Hacker News

US Police Warn of Parking Meters with Phishing QR Codes

bitdefender.com

1–10 of 21 posts

Re: US Police Warn of Parking Meters with Phishing QR Codes

#2
Scammers are sticking QR Codes on parking meters in Austin, Texas. The victim scans the QR code using a smartphone and is taken to a fake parking payment site.

Personally, I think a better scam would be to follow clampers (parking boot in US), find cars that have been clamped and replace the release notice instructions with your own version and payment QR code.

Re: US Police Warn of Parking Meters with Phishing QR Codes

#3
post #2

Scammers are sticking QR Codes on parking meters in Austin, Texas. The victim scans the QR code using a smartphone and is taken to a fake parking payment site. Personally, I think a better scam would be to follow clampers (parking boot in US), find cars that have been clamped and replace the release notice instructions with your own version and payment QR code.

What's the defense against this for the average person? Every city has a different parking app or site, there's no way for someone to know like with their bank.

Re: US Police Warn of Parking Meters with Phishing QR Codes

#4
post #2

Scammers are sticking QR Codes on parking meters in Austin, Texas. The victim scans the QR code using a smartphone and is taken to a fake parking payment site. Personally, I think a better scam would be to follow clampers (parking boot in US), find cars that have been clamped and replace the release notice instructions with your own version and payment QR code.

What's the defense against this for the average person? Every city has a different parking app or site, there's no way for someone to know like with their bank.

Very little defense for the average user if the site looks good enough on mobile. Police should be able to trace the flow of money, but the scammers are probably using dodgy overseas processing for payments.

Re: US Police Warn of Parking Meters with Phishing QR Codes

#5
post #2

Scammers are sticking QR Codes on parking meters in Austin, Texas. The victim scans the QR code using a smartphone and is taken to a fake parking payment site. Personally, I think a better scam would be to follow clampers (parking boot in US), find cars that have been clamped and replace the release notice instructions with your own version and payment QR code.

What's the defense against this for the average person? Every city has a different parking app or site, there's no way for someone to know like with their bank.

> Don't want to fumble around in your pocket to find cash for the parking meter

Keep quarters in your car and pockets. Sounds stone-aged. But it worked in 2000 and 2010 also.

Re: US Police Warn of Parking Meters with Phishing QR Codes

#7
post #2

Scammers are sticking QR Codes on parking meters in Austin, Texas. The victim scans the QR code using a smartphone and is taken to a fake parking payment site. Personally, I think a better scam would be to follow clampers (parking boot in US), find cars that have been clamped and replace the release notice instructions with your own version and payment QR code.

What's the defense against this for the average person? Every city has a different parking app or site, there's no way for someone to know like with their bank.

The solution is to have a unique ID for the parking area instead of a QR code, and you enter the ID into the official parking app for the city. There is no way to direct money to anything but city coffers with this approach. This is already what many municipalities do.

I don’t know why people are throwing their hands up at technology and using quarters when the apps are much more convenient (especially since you can remotely extend your parking time).

Re: US Police Warn of Parking Meters with Phishing QR Codes

#8
The opaqueness of QR codes for public uses like this is a problem. I was musing on this on a restaurant patio recently, that used the "QR code to view our menu" sticker things. It would be no work at all to slap new code stickers on all the outside tables. The potential for actual malice is maybe low there, but mischief is easy (ads for a competitor restaurant, PETA website at a BBQ place, autoplay fart noises, just general gross-out website, etc.)

I suppose the builtin Android and iOS code readers will have to get a confirmation step at some point. The classic problem of convenience vs. security.

Re: US Police Warn of Parking Meters with Phishing QR Codes

#9

Earlier quoted context omitted.

What's the defense against this for the average person? Every city has a different parking app or site, there's no way for someone to know like with their bank.

> Don't want to fumble around in your pocket to find cash for the parking meter Keep quarters in your car and pockets. Sounds stone-aged. But it worked in 2000 and 2010 also.

No post body was provided.

Re: US Police Warn of Parking Meters with Phishing QR Codes

#10
post #2

Scammers are sticking QR Codes on parking meters in Austin, Texas. The victim scans the QR code using a smartphone and is taken to a fake parking payment site. Personally, I think a better scam would be to follow clampers (parking boot in US), find cars that have been clamped and replace the release notice instructions with your own version and payment QR code.

What's the defense against this for the average person? Every city has a different parking app or site, there's no way for someone to know like with their bank.

chargebacks are the defense.

many scams look just like legitimate incompetent services, or legitimate well crafted services.

there is a meme going around about how scammers target gullible people to filter out more skeptical people, but really thats just one segment of the population.

Post reply on HN