QR codes are fast and easy to create, making it even easier for cybercriminals to steal your information or load malware onto your device. Here are some common QR code scams that you should look out for.

1. Email Scams

Scammers often send phishing emails that contain QR codes. This technique is known as “quishing”. These emails will pose as a credible company and ask you to scan the QR code in their email. Unsuspecting victims will scan the QR code, enter a legitimate-looking website, and enter their credentials or sensitive information. This can lead to your accounts becoming compromised and the potential download of malware onto your device.

2. Payment Scams

QR codes can be used for contactless payments by legitimate businesses. Using QR codes for payments was extremely popular during the COVID-19 pandemic since it allowed customers to make purchases without touching card readers. However, scammers can place QR codes in public places to steal your money or credit/debit card information.

3. Package Scams

If you ever receive a suspicious package in the mail with a QR code, don’t scan it. In this type of QR code scam, criminals will send you a package in the mail that you never ordered. There’s a QR code inside the package (or on the box) that you can scan to get more information about the order. The QR code will take you to a malicious website that prompts you to enter your personal information, like your credit/debit card number.

4. Cryptocurrency Scams

QR codes are often used for cryptocurrency transactions. However, criminals can use QR codes to steal cryptocurrency from victims. They may contact you by offering a “giveaway” that says you can get double the crypto if you send them crypto first. However, you’ll never get any crypto back.

5. Donation Scams

Scammers may impersonate a charity or create a fake charity to steal your money or credit/debit card information. They may place QR codes on flyers or send them to you through text or email asking you to donate money to a cause.

How You Can Avoid Qr Code Scams

Follow these tips to avoid becoming a victim of QR code scams:

• Remember that QR codes are generally used for paying money, not for receiving it.
• If you receive a QR code via email, check for red flags associated with typical phishing emails. Such as:
  • Urgent or threatening language.
  • Generic greeting and signature.
  • Were you expecting this email?
  • Information mismatches – incorrect sender email address, typos etc.
• If you ever find a QR code in an unsecured location, try to pay through other methods.
• When in doubt, contact the company directly.
• Don’t scan or open QR codes from strangers. Whether you’re approached online or in the street, don’t scan QR codes from people that you do not know.

What to Do if You’re a Victim of a QR Code Scam

If you have become the victim of a QR code scam, here’s what you can do:

• Change your passwords. If you used your login information on a fraudulent website, change your passwords immediately. Also, enable MFA (Multi-Factor Authentication) on all online accounts.
• Contact your bank. If you entered your credit/debit card information on a fraudulent website, let your bank know.
• Report it. You can report a QR code scam to the ACSC (Australian Cyber Security Centre) or Scamwatch.
• Contact IDCARE on 1800 595 160. IDCARE is Australia’s national identity and cyber support service.

 

Sources:

Microsoft