Scammers have switched to using QR codes in fake traffic violation texts — don’t fall for this

Scammers have a new way to try and steal your personal and financial information using QR codes and fake official-looking notices. Fortunately, it is possible to stay safe from this new tactic.

According to a new report from Bleeping Computer, scammers are sending out false “Notice of Default” traffic violation text messages. The messages appear to mimic state courts across the U.S.. The violations demand you scan a QR code that takes you to a phishing site that requires a $6.99 payment that is used to steal credit card information.

The scam seems to be an update to a toll violation campaign that also used text messages to confuse recipients last year.

Article continues below

Bleeping Computer reports that the new QR code version began in the last few weeks targeting residents in New York, California, Connecticut, Illinois, New Jersey, North Carolina, Texas and Virginia.

The new version contains an image of a fake court notice with an embedded QR code. “This notice constitutes a final and urgent warning regarding an outstanding traffic violation involving your registered vehicle within the State of New York,” reads the false notice.

The notice claims there is an unpaid parking or toll violation that needs to be paid immediately or the target will have to go to court. There are instructions to scan the QR code.

From there, you are taken to a site that impersonates your state’s DMV or traffic agency. The balance is apparently always $6.99. In the New York example, it uses URLs like “”ny.gov-skd[.]org” or “ny.ofkhv[.]life”.

The sites have forms where you are encouraged to enter personal and credit card information. Once scammers have that information it can be used to steal more data via follow-up phishing attacks for financial fraud or even identity theft.

How to stay safe

In general, you should not click a link or scan a QR code from an unknown phone number or email address, especially if it demands payment. As noted by Bleeping Computer, state agencies have been quick to note that they do not send text messages demanding personal information or payment.

A real DMV will not threaten you with prosecution over unpaid tolls, especially not via text message. You also want to check for spelling errors and try Googling the code or violation number to see if it’s legit.

If you do click on a link, triple-check the URL. You should see a .gov at the end, not something like .org or .life as seen in this scam.

Finally, if you do send this kind of information out via the links, make sure you contact your bank and set up a fraud alert. You can also protect yourself online by making sure you have one of the best antivirus software solutions installed and up-to-date on all your devices (including mobile), and making sure it has features like a VPN, a browser that will alert you to suspicious websites, spam alerts, and identity monitoring or identity theft protection features.

Whether it’s the DMV, a toll organization, or other traffic authority, nobody wants to receive a threatening text message. The induced panic is a lure that remains quite effective.

Now that you know how to spot this type of scam, you’re fall less likely to fall victim to one yourself. However, you should also pass this information on to your friends and family to keep them safe too.

Follow Tom’s Guide on Google News and add us as a preferred source to get our up-to-date news, analysis, and reviews in your feeds.

More from Tom’s Guide