COVID-19 UPDATE: How Data Doctors is preparing & responding. Learn more >

Sniffing Out Evil QR Codes

Posted By : Ken Colburn of Data Doctors on August 12, 2021

Question

Is there a way to tell if a QR code is safe?

Answer

This question was answered on August 12, 2021.

QR (Quick Response) codes are actually two-dimensional barcodes that were initially developed for the automotive industry back in 1994 to expand the capabilities of standard barcodes.

Although they were designed to provide a lot more detail when scanned, the QR codes that you’ll encounter as a consumer are nothing more than a quick way to represent a complicated web link.

It’s much quicker to shoot the code with your smartphone then it would be to type in a long string of characters to get to a specific web page, which is why they’ve become so popular.

QR Code Dangers
Since QR codes are generally nothing more than web links, they should be approached with the same caution you exercise when you see a web link in an email or text message.

Unless you know and trust the source, following the link generated by the QR code can lead to a malicious landing page or a sophisticated scam.

They’ve been used in targeted phishing scams because the fake sites they take visitors to can look just like a legitimate site of a trusted company.

When in doubt, avoid even shooting the QR code as some apps might automatically open the link for you.

Red Flags To Watch For
There’s no way to know how safe a QR Code is just by looking at it, so the first consideration should be your environment.

If you randomly run across a QR code while you’re out and about, especially those telling you that you could win something, be very cautious.  Criminals are using the same social engineering techniques that have proven effective in email scams.

Receiving QR codes via email, text or in a social media post should also be viewed suspiciously as the actual weblink could have been used in these instances.

Even if you get a printed item in the mail with a QR code, using it without doing your homework can be dangerous as pointed out by the Better Business Bureau (https://bit.ly/3yJMm9y

Replaced Codes
Generating QR codes is incredibly simple, which means creating stickers with fraudulent QR codes is also easy.  These stickers can be placed over legitimate QR codes on posters, table placards  or just about anywhere that they may seem legit.

If you see that the QR code is actually a sticker and not part of the poster or placard, be very cautious.

They’ve become very popular in restaurants, but I prefer to access the menu page manually via the restaurant’s website or from the info posted in Google Maps when I got directions.

QR Code Safety Scanners
If you want an extra layer of protection, instead of shooting QR codes with your smartphone’s camera app, use one that includes a safety check of the web link.

If you already have a security app installed on your smartphone, see if it includes a QR code scanner.

If you don’t, Trend Micro offers a stand-alone QR scanner for Android devices (https://bit.ly/3sdq6lZ) and Kaspersky has one for iOS devices (https://apple.co/2Xl8sRH)

Need Help with this Issue?

We help people with technology! It's what we do.
Contact or Schedule an Appointment with a location for help!

Author

Posted by Ken Colburn of Data Doctors on August 12, 2021

Feedback

Featured At: