Overview

• LKA Niedersachsen and regional police have begun systematic inspections of parking machines in Bad Harzburg, Goslar, Celle and Hannover after spotting removable counterfeit QR-code stickers.
• Scanning the fraudulent codes redirects users to spoofed sites bearing real service logos and has in at least one incident resulted in an unauthorized four-digit debit.
• Drivers are advised to test QR-code overlays by checking if they peel off, to avoid cashless payments at suspicious machines, or to use official EasyPark or Pay by Phone apps instead.
• Victims are urged to immediately contact their bank to halt payments and file a police report to aid ongoing investigations.
• First recorded in Bavaria in September 2023, quishing attacks have grown steadily and have now surpassed last year’s total in early 2025, highlighting vulnerabilities in digital-payment systems.