QR codes are everywhere these days. They’re on restaurant menus, flyers, and posters, used both offline and online. QR codes are convenient and easy to use. Just scan them with your smartphone camera, and you're directed to a link, a coupon, a video, or some other online content.

But with their rise in popularity comes a dark side. Cybercriminals are exploiting this technology. Scammers create fake QR codes to steal your personal information, infect your device with malware, or trick you into paying money. It's crucial to exercise caution when scanning QR codes. Here’s what you need to know.

The QR Code Resurgence

Originally designed for tracking parts in the automotive industry, QR codes have experienced a renaissance. They offer instant access to information and have become integral to various industries, including retail and hospitality (Forbes). Unfortunately, cybercriminals have adapted quickly, exploiting the trust we place in QR codes.

How the Scam Works

Scammers print fake QR codes and place them over legitimate ones. For example, they might stick them on posters advertising product discounts or movies. You scan the fake QR code, thinking it’s legitimate. The fake code may direct you to a phishing website that asks for sensitive data like credit card details or login credentials (Kaspersky). Or, it may prompt you to download a malicious app that:

• Spies on your activity

• Accesses your copy/paste history

• Accesses your contacts

• Locks your device until you pay a ransom

The code could also lead you to a payment page that charges you for something supposedly free.

Malicious Codes Concealed

Cybercriminals tamper with legitimate QR codes, adding a fake QR code sticker over a real one to embed malicious content or redirect users to fraudulent websites (Norton).

Fake Promotions and Contests

Scammers lure users with fake promotions or contests. Scanning the QR code directs them to counterfeit websites, prompting them to provide personal information, leading to identity theft or financial fraud (FTC).

Malware Distribution

Some malicious QR codes start downloading malware onto your device, compromising your security by giving unauthorized access to personal data and potentially damaging your device’s functionality (Malwarebytes).

Stay Vigilant: Tips for Safe QR Code Scanning

Verify the Source

Be cautious when scanning QR codes from unknown or untrusted sources. Verify the legitimacy of the code and its source, especially if it prompts you to enter personal information (CISA).

Use a QR Code Scanner App

Use a dedicated QR code scanner app rather than your default camera app. Some third-party apps offer extra security features like code analysis and website reputation checks (PCMag).

Inspect the URL Before Clicking

Before visiting a website prompted by a QR code, review the URL. Ensure it matches the legitimate website of the organization it claims to represent (Norton).

Avoid Scanning Suspicious Codes

Trust your instincts. If a QR code looks suspicious, don’t scan it. Scammers rely on curiosity. Be careful with QR codes in public places. Don't scan them if they look suspicious, damaged, or tampered with (Kaspersky).

Update Your Device and Apps

Keep your device's operating system and QR code scanning apps up to date. Regular updates include security patches that protect against known vulnerabilities (CISA).

Be Wary of Websites Accessed via QR Code

Don’t enter personal information on websites accessed through a QR code, like your address, credit card details, or login information. Don’t pay money or make donations through a QR code. Use trusted and secure payment methods (FTC).

Contact Us About Phishing-Resistant Security Solutions

QR codes can be useful and fun, but they can also be dangerous if you're not careful. Always scan them with caution. Protect yourself from scammers who exploit your curiosity.

Phishing is one of the most dangerous modern risks. If you need help ensuring your devices are phishing-resistant, contact us today to learn more.