Information checked: 16 October 2026. This report concerns a council warning issued in June 2025. It does not establish that fraud is continuing at Worcester Street, or provide an all-clear for its payment machines. The practical advice below has been updated.
Oxford City Council warned drivers on 20 June 2025 after three customers reported money taken, or attempted payments, shortly after using Worcester Street car park’s pay machines.
In its original warning, the council said checks had found skimming devices disguised as genuine card readers and fitted over the machines’ readers. Such devices can capture card details without the customer realising.
The council reported the matter to police, increased machine inspections, briefed enforcement officers and displayed public warnings. Councillor Alex Hollingsworth urged users to remain vigilant.
A declined card does not prove fraud
The council identified a card-declined message as a possible warning sign in these incidents. It is not, by itself, proof that details have been stolen. If a reader looks unusual or appears to have an extra attachment, do not use it; report the concern to the operator and police.
Using phone payment carefully
The council suggested RingGo as an alternative to inserting a card. That does not make every app, QR code or payment website safe.
RingGo’s fraud guidance says it does not use QR codes on its signs to help customers pay or download its app. Download the genuine app directly from the App Store or Google Play, or use its official websites, ringgo.co.uk and myringgo.co.uk. Avoid payment links reached through suspicious stickers, unsolicited messages or people approaching you in a car park.
Check the location and vehicle registration before confirming a session. Oxford City Council’s RingGo payment instructions explain its supported payment methods and additional service charges.
What to do if card details may have been stolen
Contact your bank or card provider immediately using its official app or the contact details on your card or statement. Explain what happened and ask it to secure the card and check suspicious transactions. Do not wait for a police investigation to finish before notifying your bank.
Check recent transactions and keep relevant payment receipts and messages. You can report suspected crime to police on 101 and fraud through the official Report Fraud service.
Refund rights depend on what happened
The Financial Conduct Authority’s guidance says to report an unauthorised payment promptly and within 13 months. A refund should normally reach the account by the end of the next business day, although exceptions apply. It should not simply be held back while routine claim paperwork is completed.
The rules distinguish payments you did not authorise from payments you were deceived into making. Debit cards, credit cards and bank transfers can involve different protections and exceptions. If the provider refuses a refund and you disagree, use its complaints process; the Financial Ombudsman Service may be able to help.
Can this report confirm the car park is safe now?
No. The June 2025 warning recorded an incident and the council’s response. It was not a guarantee about every machine then or now. Equally, it is not evidence of an ongoing incident. Check current notices and report anything suspicious.
Correction, 16 October 2026: unsupported assurances about present safety and the rarity of incidents have been removed. The blanket claim that mobile apps are safest and the simplified refund advice have also been replaced. The original publication date is retained.
