What to know
- BikeShare says fake QR codes are being placed over official ones in some of its bikes.
- Cyclists using the service are warned to use the BikeShare app and avoid scanning QR codes outside of the app.
- While TPS says it hasn’t heard of BikeShare-related incidents, there are at least three reports of fraudulent QR code scams placed on parking meters.
- Torontonians are warned to closely inspect codes, avoid inputting personal information, preview links, and refrain from scanning suspicious codes.
Those who enjoy renting a bike to travel through the city might need to be extra careful this spring, as BikeShare Toronto is warning customers about fraudulent QR codes.
In a social media post on Monday, BikeShare said it has learned that fake QR codes are being placed over the official ones in some of its bikes.
“We only recently learned through our staff and customers who reported a few incidents. Unfortunately, this is something that can happen to any unattended digital or metered payment system,” a spokesperson for BikeShare told Now Toronto.
The spokesperson did not confirm what would happen if customers scan the fraudulent QR code, but emphasized that the official BikeShare’s QR codes are only used to unlock bikes, not for payments.
In light of the incidents, the bike-sharing system is asking that customers stay extra vigilant and always unlock bikes using the BikeShare app and scan QR codes through the app instead of their phone cameras.
“If someone uses the BikeShare Toronto app or website to purchase a pass, the bike will not unlock when they scan and they should go to another bike. If someone has not already purchased a pass, know that the BikeShare Toronto QR code will never take a customer to a website to ask for payment,” the spokesperson added.
Those who suspect a QR code may be fraudulent are advised to avoid scanning it and contact customer service to report it, as staff can work to remove it.
TPS warns of parking meters QR code scams
Toronto Police Services (TPS) told Now Toronto police are not aware of any reports involving fake BikeShare QR codes.
However, over the last few weeks, police have received at least three reports for fake QR codes being placed on parking meters across the city.
According to TPS, people who were looking to pay for street parking have scanned the fraudulent QR codes and were directed to a page that appears to be legitimate, but once they made the payment, instead of being charged $7, they were charged $2,000.
“Needless to say, the same thing could be happening with bike shares,” a spokesperson for TPS said in an email to Now Toronto.
In order to avoid scams, police are advising Torontonians to:
- Inspect the code physically and look for any signs that a sticker was placed over the original one, which could include mismatched branding, peeling edges, and other unusual marks.
- Avoid scanning high-risk context QR codes, such as in parking meters, public posters, or unsolicited mail.
- Preview the URL before opening the link, checking for odd domains or misspellings that might indicate the site is not legitimate.
- Never input sensitive information into QR code links, including bank information, credit card numbers, or personal data.
- Instead of scanning the QR code, try opening the app or website manually.
- Install apps only through trusted sources, such as Apple Store or Google Play.
- Be cautious of any urgent incentives, such as “pay now” or “limited time”.
- Double check the payee’s name and details before authorizing any payments through QR codes.
- Keep your phone updated and consider getting mobile security tools that can flag malicious links.
- “When in doubt, don’t scan.” If anything looks suspicious, don’t scan the QR code.
Those who encounter any suspicious or fraudulent QR codes are also advised to notify the business or property owner associated with it, as well as local authorities.
