QR codes, a modern invention, have become widely popular but also harbor a potential risk. These scannable black and white images are omnipresent, facilitating various tasks for Android and iPhone users, such as website access, app downloads, streaming service logins, and even parking payments. Despite their convenience, QR codes pose a threat, with numerous individuals falling victim to counterfeit versions aimed at stealing personal information.
Although QR code attacks are not a new phenomenon, they are on the rise and becoming more sophisticated. A concerning scam that targets users is called “brushing.” In this deceptive tactic, criminals send unsolicited packages with fake QR codes inside to recipients’ homes, omitting sender details intentionally to pique curiosity. The recipients are prompted to scan the code to reveal the sender’s identity or return instructions, inadvertently exposing themselves to fraud.
Those ensnared by the scheme may unknowingly divulge sensitive personal data, which cybercriminals exploit to perpetrate financial theft or further fraudulent activities. Research by cybersecurity firm NordVPN indicates a growing issue, estimating that over 26 million individuals may have been directed to malicious websites through fake QR codes.
Marijus Briedis, NordVPN’s chief technology officer, highlighted the deceptive nature of QR codes, emphasizing the importance of treating unexpected codes with caution similar to unknown email links. To safeguard against QR code scams, NordVPN offers four valuable tips for users:
1. Verify the source of the QR code before scanning it, especially if it is unfamiliar.
2. Utilize the feature on smartphones that displays a website link before opening it, and refrain from proceeding if the link appears suspicious.
3. Ensure that the phone’s security software is updated regularly and use a VPN while browsing to enhance protection against malicious websites and data breaches.
4. Educate friends and family, particularly those less tech-savvy, about QR code safety measures to prevent falling victim to scams.
While QR codes simplify tasks, vigilance is crucial before scanning any code on a smartphone and sharing personal information. The “rise of the QR code” dates back to its inception in 1994 by Masahiro Hara and the Denso Wave team in Japan. Initially developed for efficient automotive part tracking, the widespread adoption of QR codes, due to the lack of patent enforcement, extended their usage beyond manufacturing to marketing, payments, tickets, and authentication. The global popularity of QR codes surged in the 2010s and further accelerated during the COVID-19 pandemic for touchless interactions like menus, check-ins, and payments.