Scammers use fake traffic violation texts with QR codes for phishing

Scammers are targeting individuals across the U.S. with deceptive "Notice of Default" traffic violation text messages, impersonating state courts. These messages pressure recipients into scanning a QR code, which leads to a phishing site demanding a small payment while aiming to steal personal and financial information, Bleeping Computer reports.

This latest scam is a variation of previous toll and parking ticket scams, but instead of links, it features an image of a fake court notice with an embedded QR code. The texts claim to be from state courts, such as the Criminal Court of the City of New York, alleging unpaid violations and demanding immediate payment to avoid court appearances. Scanning the QR code first leads to an intermediary site with a CAPTCHA to deter automated analysis, then redirects to a phishing site impersonating state agencies like the DMV. These sites request a $6.99 payment, collecting sensitive data including names, addresses, phone numbers, email addresses, and credit card information.

The stolen information can be exploited for identity theft, financial fraud, and further phishing attacks. State agencies consistently warn that they do not solicit personal or payment information via text messages.

Source: Bleeping Computer