Six QR code scams to be aware of and how to avoid them

HENDERSON, Ky (WEHT) – QR codes can be useful for businesses and individuals due to how easy they are to create and set up, replacing the need for physical media or copying a URL link.

However, there has been a rise in scammers creating fake QR codes to trick potential victims into visiting fake websites or downloading malware on their devices.

Kushal Tantry, CEO of QR Code Developer, lists six of the latest QR code scams and what to look for.

Parking information and payments:

One of the most common QR code scams right now in the US and UK involves scammers placing fake QR codes onto parking meters or information signs. This leads potential victims to a website that looks legit but is designed to steal a user’s credit card information.

People should avoid paying through QR codes whenever possible, especially in public places. If the fake code is covering up a real QR code, check if the URL is secure and what someone would expect to see. Spelling or grammar errors on the website can also determine if the site has been created by scammers.

Posters and information boards:

Other fake QR codes in public places can be found on posters or information boards, especially in town or city centers during the summer season. These tend to target unsuspecting tourists or locals looking for further details from an advertisement, which can lead them to a fake website or malicious download.

People are asked to check if the QR code is a sticker that might be covering up and replacing an existing code underneath where it may have been placed in a strange way compared to the rest of the advertisement, showing the code could have been stuck on afterwards.

One should also look for other obvious signs of a phishing website such as spelling mistakes or incorrect branding.

Social media messages:

QR code scams can be found on many social media sites such as Snapchat or Facebook, where hackers may take over one of your family or friend’s accounts and send messages containing QR codes, trying to convince people to scan them. Treat any unusual requests with caution, especially if any message seems out of the ordinary.

Such messages are likely to be worded differently from how the person normally replies or could come from someone you have not spoken to in a long time. If one thinks someone might have been hacked, be sure to message or call them on their mobile number to verify if these messages are legit.

Phishing emails:

Scammers often include fake QR codes in phishing emails that they send because people often fail to recognize that scanning these codes can be just as risky as clicking on links contained within unsolicited emails. Examples include phony emails from a well-known retailer containing a QR code pertaining to a failed transaction.

It is likely that any emails mentioning failed orders, purchases or unknown accounts aren’t legitimate, so one should avoid any further interaction with the email or sender. Check the email addresses for spelling mistakes or errors and contact the company directly through their website if not sure.

Physical mail and packages:

Scammers can use bogus letters to trick someone into scanning a QR code through surveys, competitions or tracking a supposed order. It is unlikely that many legitimate companies would send someone a QR code to use in this way.

Any mail used for scams may use urgent or threatening language to prompt quick action by offering made up rewards. If mail appears to come from a company one might recognize, be sure to check their website first or call their helpline.

QR code scanner apps:

Some scammers may also try to fool someone into downloading a harmful scanner app. This malware is allowed to be installed on one’s device that can steal data and personal details, so be careful when downloading any scanner apps that have strange reviews or have received a lot of ratings in a short period of time.

One can recognize these sorts of apps if a big update is asked to be downloaded after being installed, which is likely to be the malware. Use official online stores when searching for new apps and check to see if requesting permissions seem extensive for what is needed, such as controlling one’s screen.

For the latest news, weather, sports, and streaming video, head to Eyewitness News (WEHT/WTVW).