3750DD9C-4A12-4531-B97D-1DFFEE2C4F4D

Quishing (Scam QR Codes)

Fraudsters create fake QR codes that take you to a website that looks real. This fake site is made to steal your money or identity by getting your information or infecting your device with malware.



What is a QR Code?

A QR code is a type of barcode that you can scan with your smartphone camera to go to a website. QR codes are used in many ways, such as:

  • Ordering food and drinks at restaurants
  • Paying for parking
  • Advertising, leading to a company’s website
  • Returning goods
  • Downloading a new app on your TV

What is Quishing?

Quishing is when a scammer creates a fake QR code that sends you to a website that looks real but isn’t. This fake site may ask you for your personal or financial details or infect your phone with malware. The scammer could then use this information to steal your money or identity. For example, they might try to access your bank accounts, use your card for purchases, or apply for loans in your name.

Quishing is an evolution of phishing (fake emails) and smishing (fake text messages). The same rules apply for protecting yourself from quishing. To stay safe, follow these guidelines:

  • Only scan QR codes from trusted sources.
  • Instead of scanning, search for the company on your browser.
  • Check the QR code URL before opening it. Look for these signs of a suspicious link:
    • Make sure the website uses HTTPS.
    • Watch for spelling mistakes.
    • Ensure the website matches the company it is from.
  • Don’t download software you don’t understand.
  • Trust your instincts – if it doesn’t feel right, don’t provide your information.
  • If you think you’ve scanned a fake QR code, contact us right away.

We also encourage you to #TakeFive and follow these steps:

  1. Never share security details like your PIN or full banking password.
  2. Don’t assume emails or calls are genuine.
  3. Don’t rush – a real company will give you time.
  4. Trust your gut – if something feels off, it probably is.
  5. Stay in control – don’t panic or make quick decisions you might regret.

take five logo

To report fraud, you can phone us 24 hours a day, 7 days a week on the phone numbers below.

Phone from UK

Freephone: 0800 121 7790 (personal customers)

Freephone: 0800 032 1288 (Business On Line and Global Market Customers)

Phone from ROI

Freephone: 1800 946 764

Phone from outside UK and ROI

Not Freephone: 00353 567 757 007

If something looks like fraud on your account, we may phone you or send you a text or email to ask about it.

Report a suspicious email or text

If you think an email or text from Bank of Ireland UK looks suspicious, send it to 365security@boi.com

Lost or stolen card?

If you think your card has been lost or stolen, please phone us right away on these numbers.

We’ll cancel your card as soon as you tell us it’s missing and get a new card sent to the address we have for you in 5 to 7 working days.

See payments you did not make, paid from your account?

If you see payments you did not make, paid from your account, or anything that could be fraud please phone us right away on these numbers.

Shared your online login details?

If you have given your online banking details to someone, please phone us right away on these numbers.