An Increase in the Number of Scam QR Codes – Tips on How to Spot Them
(This information is from “Which? – Scam Alert Service” 8th August 2024)
“Have you spotted a recurring payment to a company you’ve never heard of? You’re not alone, as subscription traps – often linked to dodgy QR codes – are one of the most commonly reported complaints to the Which? Scam Sharer Tool.
People find they’ve been charged for subscriptions they didn’t sign up for after trying to download apps on their phones, or scan QR codes in restaurants, pubs, shops, bus stops, stations and car parks. Others notice payments to brands they don’t recognise, but don’t know where these companies obtained their card details from.
There’s no doubt that scammers have sensed an opportunity to abuse Quick Response (QR) codes, those black and white patterned squares you scan with a smartphone, to be directed to a website. Only last month, Greater Manchester Police warned of a ‘steep rise’ in QR code fraud, particularly in open spaces such as car parks.”
Which? has come up with some tips on how to use QR codes safely…..
5 ways to use QR codes safely.
- Check for evidence of tampering when you scan QR codes in public spaces, as someone may have placed a sticker over the real one, or it may look out of place. If in any doubt, type in the web address manually to visit the correct website.
- Don’t use an app to scan QR codes as it increases the risk of downloading malware or being redirected to a misleading advert. Most phones have a scanner built into the camera, so use this instead.
- Preview the web addressas you start to scan it – you should be able to inspect the link by clicking on additional settings within the scanner, or you could turn off internet access for your device (put it on airplane mode) and open the link to view the address details first. If it doesn’t begin with ‘https’ or the website’s address is different to what you were expecting, then don’t visit it.
- Don’t use QR codes to download appsas this increases the risks of installing something malicious. Use a verified app store instead (Play Store at google.com or App Store at apps.apple.com).
- Avoid QR codes in emailsas scammers are increasingly using QR codes to disguise malicious links, as email security tools don’t always scan images
Which? provides a very useful and informative weekly ‘scam alert service’ by email to which you can sign up for free.
