Is This QR Code Safe? Top Tips to Ensure Your QR Scans are Secure

In the modern digital era, QR codes have become ubiquitous, seamlessly integrating into our lives. QR codes have become even more widely used, especially after the pandemic. QR codes are the latest form of digital technology that has become common. Yet, amid the convenience they offer, lies a lurking threat--malicious QR codes. Not all QR codes are safe! 

​Just as a seasoned explorer navigates a maze, detecting safe QR codes requires vigilance and a keen eye. In this article, we will explain the different types of QR codes scam and give you tips on how to check if a QR code is safe or fraudulent. 

​Types of QR Codes Scam

​The types of QR Code scams includes: 

1. Fake QR Codes: Upon scanning, these will download malicious software onto your device. In many cases, just scanning the QR code is enough for the malware to do some damage.  
2. Fraudulent QR Codes: Upon scanning, it will lead you to a fake website of trustworthy organisations, that prompts you to fill in your personal data or login credentials. They might even cover up legitimate QR codes to fool more people into using their codes. 
3. Giveaway QR Code Scam: Scanning QR codes that claims to give you fake offers like rewards and discounts, but in actuality they do not. 

How to Check if a QR Code is Safe

1. Check the Source of Your QR Code 

• Ensure It’s From Verified Origins: Opt for QR codes from trusted sources, official websites, or reputable businesses to ensure their authenticity. 
• Avoid Unknown Sources: Steer clear of QR codes from suspicious emails, social media, or unauthorised platforms.

2. Check for Tampering 

• Be Extremely Cautious of QR Codes in Public Places - Make Sure There Are No QR Code Stickers Placed Above: If you are scanning a QR code that’s in public places such as restaurants menus and outdoor advertisements, always watch out for any tampering of QR codes - make sure that there is no sticker placed above. As scammers are known to replace authentic QR codes with fraudulent ones by sticking the fake QR codes over the original design.  ​

​3. Analyse the URL 

• Preview the QR Code Link: A preview of the URL should appear when you scan a QR code. Observe if the URL seems legitimate, devoid of strange characters or unusual spellings. Ensure that the URL is NOT a misspelling of a real URL.  
• Be Cautious of Shortened URLs: Exercise caution with QR codes that use URL shorteners as they can mask potentially harmful links.​

​4. Check for Redirections 

• Observe for Redirections: QR codes should directly lead to the intended destination without unnecessary hops or redirects.
• Beware of Phishing Attempts: Look out for redirections that could lead to phishing sites or malicious content.

5. Check the Website 

• ‘S’ Stands For Secure in HTTPS: Secure sites use HTTPS, and not HTTP. This ensures that there is an encrypted connection. 
• Padlocked Icon: Padlock icon should be displayed near their URL. This means that you are safely connected to the website. Ensure to share sensitive information ONLY on official secured websites. 
• Signs of a Fraudulent Website: Check for misspelt words, typos, unprofessional designs, and low resolution images. ​

What Do I Do If I Scan A Scam QR Code? 

Presently, making QR codes are super easy, hence there is a huge variety and abundance of QR scams out there. And sometimes, there is almost no way to differentiate between a scam QR code and a real one till you open the link. 

If you have entered sensitive information:

• Change your passwords and add two-factor authentication (2FA) to your online accounts. Change your passwords to online accounts on any potentially compromised sites. Ensure to use unique secured passwords that are at least 12 characters long, which includes a mix of uppercase, lowercase, numbers and special characters. For added security, it is best to enable 2FA on your accounts. 
• Inform your bank for potential fraud. Call and let them know what had happened. They will assist you in closing your bank accounts and/or credit cards, and set up new ones. 
• Look out for identity theft. Be on the lookout for warning signs of identity theft such as unexpected failed login attempts in your emails, unexpected charges on your credit card, or missing mail. 
• Consider signing up for identity theft protection. This will help safeguard your identity. Such software is designed to monitor, detect, prevent and remove any kind of threat to your data. ​

If you have downloaded malware onto your device via scanning QR code: 

• Disconnect from your Wi-Fi or cellular network. As soon as you realise that you may have downloaded malware, turn off all network connections. As without a connection, this lowers the chance of your sensitive data being sent to the hacker. 
• Backup all your files (especially important ones). It is possible that hackers might encrypt your files and force you to pay a ransom. To prevent that, backup your files especially on an external drive. 
• Change all your passwords. As hackers can gain access to your online accounts via malware, it is best to immediately change your accounts passwords (all of them!) - this includes your social media accounts, banking accounts, shopping accounts and more. Also for added safety, it is best to enable 2FA. 
• Utilise anti-malware software. Scan your device for malware via anti-malware software, this can notify you for any cybersecurity threats.

​In the realm of QR codes, safety is the ultimate treasure, and with the right tools and knowledge, you can unlock it. Always scrutinise and look out for any signs of a scam QR code to ensure you can navigate through this digital landscape safely and securely. Vigilance is Key! 

​Related Topics ​​
​
​A Personal Cybersecurity Checklist - How Cyber Secure Are You?
​
​Unmasking Phishing: Your Guide to Spotting The Signs of Phishing