Quick Response codes (QR codes for short) are a useful tool for quick access to websites and online applications. They can increase user engagement by providing an effortless transition from traditional methods to digital alternatives.
QR codes can be applied to a wide range of everyday activities and tasks such as paying for parking, sharing account details or ordering food at a restaurant.
Like all online data, QR codes are susceptible to scams used by cybercriminals attempting to steal your data. In this blog, we’ll be exposing the tactics used by cybercriminals and how to spot a fake QR code.
What is a fake QR code and how does it work?
A fake QR code is a malicious code that appears to be legitimate but redirects users to a fraudulent website or downloads malware onto their device. These fake QR codes can be created by cybercriminals who have the intention of stealing personal information, financial details, or infecting devices with harmful software. They often use social engineering tactics to trick users into scanning the code, such as offering fake discounts, prizes, or exclusive content. Once the code is scanned, the user may unknowingly give access to sensitive information or compromise the security of their device.
QR Code Scam Statistics UK – 2023
The UK’s National Fraud Reporting Center has investigated approximately 1,200 QR scams in over three years.
Figures obtained by the BBC also show a concerning rise, with 411 QR code-related offences reported to Action Fraud by September 2023, compared to 380 in 2022 and 291 in 2021.
This rise in figures shows no sign of slowing down as cybercriminals continue to attack unsuspecting users across the UK.
This is made even more concerning, with a whopping 53% of users struggling to identify QR codes, as per ChronicleLive.
Recent Examples of Fake QR Code Scams
Fake QR code car parking meters
Cybercriminals focus on high-traffic areas like car parks because they can discretely place fake QR codes over legitimate ones and trick unsuspecting users into scanning them.
Once scanned, the fake QR codes can lead to the theft of personal details, which may be used for identity theft or other malicious activities like financial theft.
In an incident reported by the BBC, a 71-year-old woman fell victim to fraudsters in a QR code scam at Thornaby Station’s car park, resulting in a £13,000 loss.
Fake webinar QR codes
Phishing emails containing fake QR codes have made their way around reputable companies. Cybercriminals have posed as reputable companies sending meeting/webinar invites urging employees to scan them immediately.
At the start of April 2024, HMRC issued a ‘do not engage’ warning over a VAT email QR code scam. Cybercriminals impersonated HMRC and sent out a fake VAT email, encouraging users to give away their personal information via QR code.
These are just a few recent examples that have made the headlines but many more QRshing emails get sent round UK businesses every single day.
How to spot a QR code scam
QR code scams can be difficult to spot but there are some key aspects to help you identify a fake QR code scam. Remember if something feels off then it probably is! It is better to err on the side of caution and avoid scanning the code.
Key aspects to identify a QR code scam:
- Always be cautious of QR codes in unexpected places or from unknown sources
- Make sure the website is https:// secure
- Does the website look legitimate?
- Avoid any codes that seem too good to be true
- Use a QR code scanner with security features that can detect scams
By staying vigilant and practising safe scanning habits, you can enjoy QR codes’ convenience and efficiency without risking your personal information.
Can Intrasource help if I’ve been targeted by a QR code scam?
If you believe you have been targeted by a QR code scam, Intrasource can help by providing guidance on how to protect your personal information and prevent further scams. Our offensive security tactics involve actively seeking out and identifying potential vulnerabilities in systems, while defensive security tactics focus on protecting against and responding to security threats. By combining both offensive and defensive security measures, you can better safeguard yourself against QR code scams and other cyber threats.
Find out more about our cybersecurity services online or call us on 01482 628800 for more information.
