1 in 10 People in NL Fall for QR Code Scams
Nearly three-quarters of Dutch residents don’t know how to scan safely, with one in ten already falling victim to fraud.
QR codes have become part of daily life in the Netherlands. From scanning menus at cafés and paying for parking to receiving official letters or event tickets, they are everywhere. But as their use has grown, so has fraud. Recent studies from ABN AMRO and Ipsos I&O show that nearly three-quarters of Dutch people don’t know how to use QR codes safely, and 1 in 10 have already been victims of so-called “quishing” scams.
How Scammers Trick You
Fraudsters exploit trust and convenience. Fake QR codes are often pasted over real ones on parking meters, restaurant tables, or posters. Scammers also send them through email, WhatsApp, or even fake government letters, such as a recent DigiD scam that asked residents to “reactivate” accounts.
Once scanned, these codes may redirect to a fraudulent website that looks legitimate but is designed to steal personal data like your BSN, banking details, or login codes. In some cases, the code leads directly to a payment request, allowing criminals to take money immediately. Fake QR codes are also common on second-hand trading platforms such as Marktplaats or Vinted, where fraudsters pose as buyers or sellers.
Who Is Most at Risk?
Research shows that younger people are the least cautious when scanning QR codes, often prioritising speed and convenience. Older adults are somewhat more careful, but still vulnerable. Many people only realise they’ve been scammed after money leaves their account or sensitive information has already been shared.
How to Stay Safe
Experts stress that scanning a QR code itself isn’t dangerous, problems arise when you enter personal details on the wrong website. To protect yourself:
Always check the URL before entering information. A code from the Tax Authority should only lead to belastingdienst.nl.
Look for signs of tampering on physical QR codes (stickers placed over originals, for example).
Avoid shortened or strange-looking URLs that don’t clearly match the source.
Use your banking app’s scanner instead of your phone camera; many banking apps have built-in security.
Verify suspicious links with checkjelinkje.nl, recommended by Dutch police.
Report suspicious codes to your bank or the police, and if you’ve already entered details, act immediately by changing passwords, scanning your device for malware, and contacting your bank.
A Call for Awareness
Fraud experts warn that QR scams are only becoming more creative. With 72% of Dutch residents unaware of the risks, awareness and vigilance are the best defences. As ABN AMRO’s Marco Hendriks explains: “It only takes a few seconds to check a web address—but those seconds can save you from serious trouble.”