As reported by Ruhrnachrichten in March 2025, fake QR codes were discovered at charging stations operated by Dortmund energy provider DEW21. The scam targets electric vehicle drivers, advertising a "flat rate of 17 euros" for a full charge. Anyone who scans the code does not reach the payment page but a phishing attempt, according to the company.
What happened?
The first case was discovered at the DEW21 charging park on Rüschebrinkstraße in Wambel, the company said. Unknown perpetrators had placed fake QR code stickers over the original codes.
The scam works like this:
- False promise: The QR code advertises "Full charge for only €17 flat rate"
- WhatsApp redirect: The scan doesn't lead to the official ChargeCloud payment page, but starts a WhatsApp chat
- Data theft: In the chat, scammers try to gain access to the smartphone and personal data
- No power, no security: The victim receives neither charging power nor is the vehicle protected
DEW21 responds
The Dortmund energy provider said it had taken the following measures:
- Report filed: The case was reported to the police
- Check of all charging stations: DEW21 is checking if other locations are affected
- Warning to customers: Official communication about the scam
"Use secure payment methods like our fahrE app or roaming charging cards. Do not scan unknown QR codes at charging stations."
– DEW21 Official recommendation
Why EV charging stations are particularly vulnerable
| Factor | Risk |
|---|---|
| Habit | Users expect QR codes as payment method |
| Time pressure | When charging, the code is often scanned without checking |
| Trust | Public infrastructure appears trustworthy |
| High amounts | Charging sessions cost 20 to 50 euros |
| Unattended | Charging stations are often in remote locations |
How QRtrust protects
Without QRtrust:
- EV driver scans fake QR code
- WhatsApp opens with unknown chat
- Scammers gain access to personal data
- No charging power, potential identity theft
With QRtrust:
- EV driver scans with QRtrust app
- ⚠️ WARNING: Unknown destination URL
- User is warned and stops
- Damage prevented
Protect your charging infrastructure
DEW21 operates over 350 charging points in Dortmund. QRTrust checks the destination addresses of QR codes at charging stations and reports manipulated stickers to the operator.
Start pilot project →Sources
- Ruhrnachrichten: "Fake QR codes discovered at DEW charging stations – Scam targets EV drivers" (25. March 2025)
- DEW21 Press release (March 2025)
- Dortmund Police
About QRTrust
QRTrust is Germany's first QR code security platform, developed in Dortmund. AI-powered real-time detection, a local threat database and multi-layered security checks protect citizens, authorities and businesses from quishing attacks. GDPR compliant, hosted in Germany.