Parking should be simple, yet a growing wave has turned the ordinary pit stop into a risk. Officials now urge cash at pay points because small habits can shield wallets better than tap or scan. Keeping coins and notes nearby lets you bypass iffy screens when doubt appears. For drivers, that backup reduces stress while an epidemic unsettles England’s car parks and roadside stops. Small choices today prevent large headaches tomorrow.
Why drivers are being told to carry cash
Criminals are swapping safe payments for traps that hide in plain sight. The scheme, known as quishing, uses QR codes to funnel people onto bogus sites. Action Fraud links it to losses near £3.5 million in one year. The tactic spreads fast because quick scans feel normal and harmless.
Car park signs are an easy target. A sticker can cover the real code or mimic an official layout. One scan can open a convincing page that asks for card numbers, logins, or a download. The design looks tidy, the logo seems right, and the request feels routine.
Coins and banknotes cut that risk because they avoid the screen altogether. Machines still accept cash in many pay-and-display bays. When the setup looks odd, pay in cash and keep moving. For drivers, a small stash in the glovebox buys time, control, and peace of mind.
How drivers get caught out by tampered QR codes
The playbook is simple. Scammers place rogue stickers where people expect quick payment. The fake page loads, then prompts for card details or app permissions. Because the code sits on official signage, trust slides in. The pressure to pay now does the rest.
Some traps exploit third-party scanners. An app from an app store may bundle shady trackers. Your phone’s built-in camera reader is safer, because it shows the URL clearly. Before tapping, read the address with care. If anything looks off, do not proceed.
Skip the scan when doubt lingers. Search the operator’s name to find the real site or app. Use the pay machine if it is working, or call the helpline on posted boards. The “slow” option wins here. For drivers, that pause can save a week of fraud calls.
Practical checks that make scams fall flat
Treat QR codes like links from strangers. Criminals love them because the destination hides behind a square. You cannot “see” where it leads. Read the sign from a step back. Misaligned stickers, poor lamination, or odd fonts are red flags. If the panel looks altered, walk away.
Tech specialists warn that familiarity fuels mistakes. Because everyone scans daily, vigilance dips. A few seconds of focus can save hundreds of pounds. Check for a padlock, but do not rely on it. Look at the domain itself. A parking brand should not redirect through random shorteners.
Action Fraud’s team stresses a simple habit: stop and check before you scan. Think about the location, the context, and the ask. Codes in open spaces face more tampering. Emails and texts can hide rogue squares too. For drivers, one calm review of the page beats any rush.
Money lost, reporting trends, and who to trust
Losses tied to quishing sit near £3.5 million over a single year. The cost reflects small hits that add up, from “verification” payments to drained cards. England’s busiest parking spots create volume, so the tactic spreads where it pays. The pattern mirrors classic phishing, only faster.
Action Fraud notes rising reports and sharper lures. The advice is clear: check the panel, then the link, then your gut. When in doubt, contact the operator directly using a known number. Do not use the details shown by the suspicious page. Independent contact breaks the loop.
Guidance also covers the tools you use. Prefer your phone’s pre-installed scanner, not a random app. Avoid scanning codes from flyers, windscreen leaflets, or posts with easy access. Report suspicious codes to site staff. For drivers, trusted routes and known contacts reduce exposure.
Cash-first parking habits that cut exposure
Plan for cash payments before a trip. Keep small coins sorted for typical tariffs. Store a few clean banknotes in a sealed sleeve. Light preparation helps when machines glitch, signals drop, or the code looks wrong. The aim is smooth exits without sharing sensitive data.
Use search engines to reach official portals. Type the company name, then bookmark the real domain. When you must scan, preview the full URL. Stop if it shows odd subdomains or spelling tricks. Real operators keep names consistent. Shortcuts feel fast, yet they often add risk.
Report suspect stickers to the car park operator and Action Fraud. Photograph the panel from a distance and note the bay. Alert others nearby if it feels safe. Cash remains reliable while systems harden. For drivers, steady routines beat clever traps designed to hurry decisions.
A simple routine that keeps payments safe for now
Carry coins, hold a couple of notes, and pause before every scan. Use the native camera reader, not a store app you barely know. When the link looks strange, pay in cash or search for the official site. Contact the operator directly if confusion persists. For drivers, this calm, repeatable routine protects money and time while the epidemic runs its course.
