QR codes have become a prevalent tool in modern times, offering convenient shortcuts for users, but they also pose a potential risk. These scannable black and white codes are now ubiquitous, enabling both Android and iPhone users to swiftly access websites, download apps, log into streaming services, and even make payments by simply scanning them with their phone cameras. While QR codes undoubtedly save time and effort, they also harbor a darker side, with a significant number of individuals falling victim to counterfeit versions aimed at stealing personal information.

QR code attacks, though not new, are on the rise and becoming more sophisticated.

One of the latest alarming scams targeting users is referred to as “brushing.” In this deceptive ploy, scammers send unsolicited packages to homes containing a phony QR code. These packages typically arrive without any sender information, a deliberate tactic to pique curiosity. Recipients are then instructed to scan the code to identify the sender or learn how to return the package, unknowingly exposing themselves to fraud.

Individuals who are deceived by this scam may unwittingly divulge sensitive personal information, which cybercriminals can exploit to perpetrate financial theft or additional fraud.

Research conducted by cybersecurity company NordVPN indicates a growing issue. The company estimates that over 26 million people may have been unknowingly redirected to malicious websites via fake QR codes.

According to Marijus Briedis, NordVPN’s Chief Technology Officer, “QR codes have emerged as an inconspicuous entry point for cybercriminals. Unlike conventional phishing emails, where individuals have become adept at spotting red flags, a physical QR code often instills trust.”

“Approach every unexpected QR code with the same caution you would exercise with a link from an unfamiliar sender in your email inbox,” Briedis advised.

Here are four top tips to safeguard against QR code scams:

– Verify the source of a QR code before scanning it. If unsure, refrain from scanning it and contact the sender through official channels.
– Utilize the feature on smartphones that previews website links before opening them. If a link appears suspicious or unexpected, avoid proceeding.
– Keep your phone’s security software up to date and use a VPN while browsing the internet to shield yourself from dangerous websites and data breaches, even if you inadvertently access a malicious site.
– Educate friends and family about these safety measures, especially those less tech-savvy, as scammers frequently target individuals unaware of such tactics.

While QR codes simplify life, the guidance is explicit: exercise caution before scanning anything on your smartphone and refrain from sharing personal data without verifying the source behind the code.

RISE OF THE QR CODE

The QR code, formally known as Quick Response code, was initially developed in 1994 by Masahiro Hara and his team at Denso Wave in Japan. Initially designed for tracking automotive parts more effectively than traditional barcodes, which have limited data capacity, the codes gained widespread adoption as Denso Wave chose not to enforce patent rights. Initially used in manufacturing, QR codes swiftly expanded to marketing, payments, tickets, and authentication. Their popularity surged globally in the 2010s and skyrocketed during the COVID-19 pandemic for touchless menus, check-ins, and payments.