Quishing Alert: Fake QR Codes at DEW21 Charging Stations in Dortmund
Scammers placed fake QR codes at DEW21 charging stations in Dortmund-Wambel. The scheme lures EV drivers with a fake €17 flat rate into a WhatsApp trap.
As reported by Ruhrnachrichten in March 2025, fake QR codes were discovered at charging stations operated by Dortmund energy provider DEW21. The scam specifically targets electric vehicle drivers, promising a supposed "flat rate of 17 euros" for a full charge. But anyone who scans the code falls into a sophisticated phishing trap. We summarize the case and show how QRtrust protects against such attacks.
What happened?
The first case was discovered at the DEW21 charging park on Rüschebrinkstraße in Wambel. Unknown perpetrators had placed fake QR code stickers over the original codes.
The scam works like this:
- False promise: The QR code advertises "Full charge for only €17 flat rate"
- WhatsApp redirect: The scan doesn't lead to the official ChargeCloud payment page, but starts a WhatsApp chat
- Data theft: In the chat, scammers try to gain access to the smartphone and personal data
- No power, no security: The victim receives neither charging power nor is the vehicle protected
DEW21 responds
The Dortmund energy provider took immediate action:
- Report filed: The case was reported to the police
- Check of all charging stations: DEW21 is checking if other locations are affected
- Warning to customers: Official communication about the scam
"Use secure payment methods like our fahrE app or roaming charging cards. Do not scan unknown QR codes at charging stations."
— DEW21 Official recommendation
Why EV charging stations are particularly vulnerable
| Factor | Risk |
|---|---|
| Habit | Users expect QR codes as payment method |
| Time pressure | Those who need to charge scan quickly without checking |
| Trust | Public infrastructure appears trustworthy |
| High amounts | Charging costs 20-50€ – worthwhile loot |
| Unattended | Charging stations are often in remote locations |
How QRtrust protects
Without QRtrust:
- EV driver scans fake QR code
- WhatsApp opens with unknown chat
- Scammers gain access to personal data
- No charging power, potential identity theft
With QRtrust:
- EV driver scans with QRtrust app
- ⚠️ WARNING: Unknown destination URL
- User is warned and stops
- Damage prevented!
Protect your charging infrastructure
DEW21 operates over 350 charging points in Dortmund. With QRtrust you can verify all QR codes and proactively protect your customers.
Start pilot project →Sources
- Ruhrnachrichten: "Fake QR codes discovered at DEW charging stations – Scam targets EV drivers" (25. March 2025) →
- • DEW21 Press release (March 2025)
- • Dortmund Police
*About QRTrust: QRTrust is Germany's first QR code security platform, developed in Dortmund. With AI-powered real-time detection, QRTrust protects citizens and businesses from quishing attacks. 100% GDPR compliant, hosted in Germany.*