QR Code Scams on the Rise

QR code scams are behind the new wave of terror, said Kushal Tantry, CEO of QR Code Developer.

“There has been a rise in scammers creating fake QR codes to fool victims into visiting malicious imposter websites or downloading malware on their devices,” said Tantry. “This is likely to increase around Halloween with local events being advertised, social media trends and other potential tricks.”

Tantry identified six of the latest QR code scams:

Parking information and payment scams  

One of the most common QR code scams now involves scammers placing fake QR codes onto parking meters or information signs.

“This leads victims to a website that looks official but is designed to steal user’s credit card information. People are usually in a rush to pay and may attempt contactless payment without looking for warning signs, especially when looking for parking at busy autumn events for Halloween,” Tantry said.  

“You should avoid paying through QR codes whenever possible, especially in public places. If the fake code is covering up a real QR code in that location, check if the URL is secure and what you would expect to see. Any spelling or grammar errors on the actual site can also determine if it might have been created by scammers,” Tantry said.  

Posters and information board scams  

Other fake QR codes may be found on posters or information boards in public places, especially in town or city centers during the Halloween season. These scams tend to target unsuspecting tourists or locals looking for further details from an advertisement, which can lead them to a fake website or malicious download, Tantry said.  

“Again, check if the QR code is a sticker that might be covering up and replacing an existing code underneath. It may have been placed in a strange way compared to the rest of the advertisement, showing the code could have been stuck on afterward. You should also look out for other obvious signs that you are on a phishing website and not a legitimate site, such as spelling mistakes or incorrect branding,” Tantry said.  

Tantry said QR code scams can be found on many social media sites, such as Snapchat or Facebook.

“Hackers may take over one of your family’s or friends’ accounts and send messages containing QR codes, trying to convince you to scan them,” Tantry said. “Treat any such unusual requests with caution, especially if they are out of the ordinary. This could also take the form of a Halloween-themed social media trend asking each person to pass something on or look at something spooky. These messages are likely to be worded differently from how the person normally replies or could come from someone you have not spoken to in a long time. If you think someone might have been hacked, be sure to message or call them on their mobile number to verify if these messages are legitimate.” 

Phishing email scams  

Scammers often include fake QR codes in phishing emails that they send to potential victims.

“This is because people often fail to recognize that scanning these codes can be just as risky as clicking on links contained within unsolicited emails. Examples of this scam include phony emails from a well-known retailer containing a QR code pertaining to a failed transaction or some sort of special deal being offered, perhaps relating to a Halloween or autumn sale,” Tantry said. “It is likely that any emails mentioning failed orders, purchases, or unknown accounts aren’t legitimate, so you should avoid interacting any further with the email or sender.”

Physical mail and package scams  

“Scammers can use bogus letters to trick you into scanning a QR code through surveys, competitions, or tracking a supposed order. It is unlikely that many legitimate companies would send you a QR code to use in this way,” Tantry said. “Any mail used for scams may use urgent or threatening language to get you to act quickly or incentivize you to scan by offering made-up rewards. If the mail appears to come from a company you recognize, be sure to check their website first on your official account or ring their helpline.” 

QR code scanner app scams  

Scanning QR codes is doable via your smart device camera, but some scammers may also try to fool people into downloading a harmful scanner app.

“This then allows malware to be installed on your device that can steal data and personal details,” Tantry said. “Be careful when downloading any scanner apps that have strange reviews or have received a lot of ratings in a short space of time. You can recognize these sorts of malicious apps if they immediately ask you to download a sizeable update after being installed, which is likely to be the malware. Use the official online stores when searching for new apps and check to see if they request permissions that seem extensive for what is needed, such as controlling your screen.”