Fraudsters have mastered a new scheme to deceive travelers – at train stations and airports, including duty-free shops, citizens are offered to scan QR codes leading to fake websites. As reported by the cyber police of St. Petersburg and the Leningrad Region, criminals rely on the haste and inattention of passengers.

The scenario looks harmless: a stranger introduces himself as an employee of a well-known company or offers help, and then recommends scanning a QR code allegedly to get a discount in duty-free, participate in a promotion, accrue bonuses, or receive a small gift. After clicking on the link, a phishing page opens where the victim is asked to enter a phone number, bank card details, log in via online banking or "Gosuslugi", confirm the operation with a code from an SMS, or install an application. As a result, criminals gain access to accounts and finances.

The police strongly recommend not scanning QR codes from strangers, checking the website address before entering any data, not reporting codes from SMS, and not installing applications at the request of outsiders. They advise immediately refusing particularly advantageous offers. The scheme is effective precisely in transit zones, where a person is in a hurry, analyzes what is happening less, and is more willing to believe in official promotions. The most dangerous scenario is installing an application from an unverified source, which can give fraudsters full access to the smartphone and all financial applications.