Scammers are increasingly using QR codes to steal personal information and install malware, according to cybersecurity expert Joseph Steinberg.
QR codes are everywhere, and one quick scan can take you to a site to order food, pay for parking or get information. But that convenience may have made users too comfortable.
Scammers use QR codes to direct users to fake login or payment pages, steal their personal information or trick them into downloading malware.
Joseph Steinberg, a cybersecurity expert and author of Cybersecurity for Dummies, says QR code scams work like phishing links.
“Phishing is where the link takes you to a site that looks legitimate. Well, a QR code can do exactly the same thing. It’s just that you can’t even look at the link to see that it looks legit,” Steinberg said.
The threat is growing. QR code phishing attacks have surged this year, increasing from 7.6 million in January to 18.7 million in March, according to a report by Microsoft.
Steinberg warns that scanning a QR code and opening a preview link can be enough to download malware onto your device.
Before you scan a QR code
Before scanning, users should inspect QR codes for any signs of tampering, such as stickers placed over other QR codes.
Steinberg advises users to notice how the QR code is presented. A QR code etched into a wooden block in a restaurant is harder to tamper with than one printed on a loose sheet of paper on a street pole.
Experts say to be cautious with QR codes in unexpected packages, messages, flyers, or emails, and to avoid scanning codes for device linking, multi-factor enrollment or sign-ins unless you initiated the request.
If a code seems suspicious, don’t open anything. Type the company’s official website directly into your browser.
If you believe you clicked a suspicious link, close the page and run a malware scan.
If you entered a password, change it immediately from an uncompromised device and turn on multi-factor authentication.
If you provided banking or credit-card information, contact your financial institution right away.
