How to Spot Fake QR Code Parking Fine and Toll Invoice Scams Targeting Australian Small Businesses

Summary

This guide helps you troubleshoot and resolve: How to Spot Fake QR Code Parking Fine and Toll Invoice Scams Targeting Australian Small Businesses. Follow the steps below to fix the issue.

Common Causes

Australian small businesses are increasingly targeted by "quishing" scams—phishing attacks that use QR codes instead of links. These scams typically arrive as printed notices stuck to company vehicles or as emails claiming to be from toll operators or local councils. Scanning the code leads to a fake website designed to steal credit card details, login credentials, or business banking information.

Quick Fix Steps

1. Do not scan QR codes on unexpected parking fines or toll invoices.
2. Verify the sender through official channels before making any payment.
3. Report the incident and delete the message.

Detailed Instructions

Identifying Fake Parking Fine Scams

Fake parking fines often appear as physical notices placed on vehicle windscreens or as emails claiming to be from a council. They rely on urgency and fear of additional penalties to trick recipients into scanning a QR code.

Identifying Fake Toll Invoice Scams

Toll invoice scams usually arrive via email or SMS. They claim your business vehicle has an unpaid toll and include a QR code for "instant payment." These messages often mimic the branding of major Australian toll operators.

How to Verify a Legitimate Notice

1. Check the issuing organisation. Legitimate councils and toll operators provide clear contact details and reference numbers.
2. Visit the official website by typing the address directly into your browser. Do not use a QR code or link from the notice.
3. Look for your vehicle registration and notice number on the official website before paying.
4. Inspect the email sender address. Scammers often use addresses that look similar but contain extra characters or public domains like @gmail.com.

What to Do If You Suspect a Scam

1. Do not scan the QR code or click any links in the message.
2. Do not enter payment details or login credentials on any site reached via the code.
3. Take a screenshot or photo of the notice for your records.
4. Delete the email or SMS, or dispose of the physical notice.
5. Report the scam to Scamwatch.
6. If you believe your business accounts may be compromised, Open a Ticket with 220 Internet Services support.

Prevention Tips

• Treat all unsolicited QR codes as suspicious, even if they appear to come from a known organisation.
• Train employees to verify fines and invoices through official websites before paying.
• Keep your business devices updated with the latest security patches.
• Use multi-factor authentication on business banking and email accounts.

Still Having Issues?