Why You Should Think Twice Before Scanning That QR Code

QR codes are everywhere now. They track our packages, enable contactless payments and even eliminate printed restaurant menus. And their popularity is only growing. A recent study by Uniqode revealed that 59% of Americans scan QR codes daily.

But, according to cybersecurity company NordVPN, more than 20 million people have been tricked by fake QR codes, which lure them to malicious websites. “Scammers rely on your curiosity to fool you,” says digital security expert Marijus Briedis. So, “treat QR codes like you would links in emails from people you don’t know.”

Here’s how to spot QR code scams to keep yourself safe from them.

What Is a QR Code?

QR codes are a type of barcode designed to provide information to consumers. They look like black-and-white squares, and when you scan one with your smartphone camera, it typically takes you to a website.

“We really saw the rise of this with restaurant menus during the pandemic,” says cybersecurity expert John Wilson. “They also provide a great way to simply convey information, such as payment for parking or an email address for a business.”

Why are they so popular?

QR codes are quick and easy to use. For customers, that often means accessing information without the hassle of typing in a website URL. Businesses also like them because they encourage purchases and collect first-party data.

“With a quick scan, you get the information you need,” says Briedis. “However, scammers have noticed this and are now taking advantage of how comfortable we’ve become with scanning codes without much thought.”

What Is QR Code Brushing?

QR code brushing is a scam in which you receive a package, flyer or other piece of mail you didn’t order, which contains a QR code directing you to scan it — often under the guise of learning who sent it or claiming a prize. Once you scan it, it leads you to fake websites, aka phishing sites, which can steal your personal information and install malware on your phone.

“[It’s] not to steal money right away, but to confirm that a person or address is real, or to quietly collect basic data or engagement behind the scenes,” says QR code expert Sharat Potharaju.

Similarly, “quishing” scams, short for QR code phishing, send you to fake websites that look legitimate, like banks or delivery services, and trick you into entering your personal information. Potharaju warns this is an even bigger risk to consumers than QR code brushing.

Signs a QR Code Is a Scam

QR code warning signs include codes that:

• Are delivered with urgent messages to scan them immediately,
• Are affixed in odd places, such at the side of a parking meter,
• Look like they’ve been stuck over another code sticker,
• Are texted to you out of context or from an unknown source, or
• Are left on your doorstep in the form of a card or flyer.

How to Protect Yourself From QR Code Scams

When you scan a QR code using your phone’s camera, it usually shows you a preview of the website. Take a moment to check the URL, make sure it matches your intended destination and that the website looks legitimate. Also:

• Use caution with sites that lead directly to a login or payment page, or have numerous typos,
• Keep your phone’s software up to date,
• Use security tools, such as a VPN, to help spot and protect you from dangerous websites,
• Report suspicious packages to your local consumer protection agency,
• Use extra caution with QR bill payments, to make sure you haven’t been redirected, and
• Share scam potentials with family and friends, especially those not comfortable with technology.

If you run a business, Wilson also suggests using dynamic QR codes that expire, educating customers about safe QR code practices and considering moving toward NFC technology, direct URLs and app-based interactions.

“Always stay vigilant,” says tech expert Jason Wingate. “If you’re unsure if the QR code is legit, or where it came from, don’t use it and instead type in the URL yourself.”

About the Experts

• Marijus Briedis is a globally recognized digital security and privacy expert, and CTO of NordVPN cybersecurity solutions.
• John Wilson has been combatting email-based fraud and phishing since 2006, and is a senior fellow of threat research at the global cybersecurity company Fortra.
• Sharat Potharaju is co-founder and CEO of the QR code platform Uniqode.
• Jason Wingate, is CEO of Emerald Ocean Ltd., a holding and product development company with a 15-year history in tech.

The post Why You Should Think Twice Before Scanning That QR Code appeared first on Family Handyman.

Article source here: Why You Should Think Twice Before Scanning That QR Code