Latest insights on QR code security, quishing, and cyber threats
July 25, 2026 · Security · 6 min read
Alberto Stegeman warns about QR code fraud on Dutch television – and four new incidents in the Netherlands and Belgium show the scam has long since crossed borders. Our quishing map now covers three countries.
Read moreDeceptively real parking tickets with the city logo, correct number plate and a QR code for instant payment: police in Villingen-Schwenningen warn of a new quishing scam targeting parked cars. Here is how to spot the forgery.
Frankfurt police discovered at least eight fake EasyPark QR codes on parking machines, including on Fichardstraße and Grüneburgweg. The fake website harvested credit card details. Here is how to protect yourself.
Fraudsters covered almost all parking ticket machines in Dorsten’s city centre with fake EasyPark stickers. The phishing site easy-parked.com harvested credit card data. The city has responded – here is what you need to know.
Public broadcasters Tagesschau and rbb warn about quishing: fake QR codes on parking meters, charging stations and in deceptively real letters lead to phishing sites. Here is how to spot QR code fraud and protect your banking and credit card data.
Flyers made to look like official notices from Poland's tax authority are turning up under windshield wipers. A QR code on them leads straight into a phishing trap – criminals harvest ID numbers, logins and credit card data.
A fake QR code sticker was discovered on a public EV charging station in Schwabenheim, Germany. A driver was redirected to a fraudulent website – criminals attempted to charge his credit card.
A company in Tauberbischofsheim received deceptively authentic bank letters with QR codes – despite having no account at the specified bank. Heilbronn police warn of the fraud scheme known as 'Quishing'. Multiple banks are affected.
A Reddit user warns about a deceptively authentic scam letter in the name of DKB bank. The letter contains a QR code leading to a fake login page. The scam also targets other banks like Deutsche Bank, Commerzbank, and ING.
The BSI warns of a new phishing method called Ghost Pairing. Criminals abuse WhatsApp's device linking feature to gain access to messages and contacts. Here's how to protect yourself.
Kaspersky reports dramatic increase in QR code phishing: From August to November 2025, malicious QR codes in emails rose from 47,000 to 250,000 cases. PDF attachments and mobile devices are the main targets.
Scammers are dropping fake DHL notifications into mailboxes. The QR code leads to phishing pages that steal credit card data. The new scam hits Germany during the 2025 holiday season.
Scammers placed fake QR codes at DEW21 charging stations in Dortmund-Wambel. The scheme lures EV drivers with a fake €17 flat rate into a WhatsApp trap.
Plastic bags with fake paper wallet printouts were discovered in Dortmund's Weststadt. The QR codes lead to fraudulent websites. A pattern also known from charging stations.
QRTrust now offers an automatic BSI report template for quishing incidents. Generate NIS-2 compliant incident reports with one click - including deadline tracking, IoC documentation, and direct link to the BSI reporting portal.
The new NIS2 Implementation Act of December 2, 2025 massively tightens cybersecurity requirements. Quishing attacks are reportable, executives are personally liable. Fines up to €10 million.
The BSI warns: Cyber spies are specifically targeting German authorities. Germany is the fourth most frequent target worldwide. At the same time, phishing, quishing and vishing attacks are rising dramatically.
Three cases in Märkischer Kreis: Scammers send QR codes to sellers on classified ad platforms. Those who scan end up on fake payment pages and lose money.
Once again, fake QR codes have been discovered on parking meters in downtown Dortmund. A chronology of fraud cases and how QRTrust can protect.
QRTrust, Germany's first QR code security platform from Dortmund, participates in the renowned start2grow startup competition. We are seeking project partnerships with municipalities, authorities and companies.
Fake letters are currently being sent claiming to be from Deutsche Bank. They contain QR codes for an alleged TAN update. How to recognize the scam and protect yourself.
With the implementation of the NIS2 directive, requirements for municipalities and authorities are increasing. QRTrust offers legally compliant evidence preservation and automated reporting chains for quishing attacks in public spaces as an early warning system.
Quishing is QR code phishing — in 2026 the fastest-growing phishing variant in Europe. How the scam works, how to spot it, and how to protect yourself. With current BSI and police data, 18 documented cases from Germany, and a full FAQ.
