While not a new technology QR codes are becoming ubiquitous in modern life, offering a convenient way to access links , coupons or various other forms of content. Unfortunately this convenience can be exploited by scammers wanting to access your data.
In some cases malicious QR codes are distributed in the form of fake promotions or contests, where scanning the provided QR code may take users to the scammers website, often prompting them to provide personal information. Another common vector of attack is to replace genuine QR codes with stickers containing the malicious code. How many times have we all innocently scanned the QR code on our restaurant table to access a menu or download an app?
How to stay safe
- Verify the source: Always be cautious when scanning QR codes from unknown or untrusted sources
- Use a QR Code Scanner App: While most smartphones can handle QR codes natively within the camera app, it’s worth considering a dedicated QR code scanner app that can provide extra security features such as Trend Micro QR Scanner
- Inspect the URL before clicking: Before visiting a website prompted by a QR code, Ensure the URL matches the legitimate website of the organisation it claims to represent.
- Avoid Scanning Suspicious Codes: Trust your instincts. If a QR code looks suspicious, refrain from scanning it. Scammers often rely on users’ curiosity. Be careful when scanning
- Don’t scan QR codes that you see in public places. Don’t scan them if they look suspicious, damaged, or tampered with. Exercising caution is paramount.
- Update Your Device and Apps: Keep your device’s operating system and QR code scanning apps up to date. Regular updates often include security patches that protect against known vulnerabilities.
- Be Wary of Websites Accessed via QR Code: Don’t enter any personal information on a website that you accessed through a QR code. This includes things like your address, credit card details, login information, etc