QR Code SCAM

QR code scams are when scammers use a fraudulent QR code that is disguised as a legitimate code for payment, and then they send to the innocent victims to scan it on their phones. The code installs malware that steals the personal and financial information of the victim.          

It is another form of Phishing, using bogus QR codes to substitute the real QR codes.

How to avoid it:

  • Before scanning a QR code, check for any signs of tampering or if the QR code is on a removable sticker. If so, avoid scanning it.
  • Avoid scanning general QR codes in public places, such as bus stops, train stations or walkways.
  • Always check the web page URL address, if the QR code launches your web browser, to ensure it is sending you the correct website. Consider using a scanner app that actually informs you of the website that the QR code is directing you to before it takes you there.
  • If you scan a QR code and find yourself on a suspicious web page that asks for personal or account details such as online banking username and/or passwords, do not key in the information.
  • If you are asked to install a mobile app on your device after scanning a QR code, check to ensure the links, publisher and requested permission details are all genuine before proceeding with installation.
  • Verify the payment details (amount, beneficiary name, etc.) before confirming the transaction to ensure that it is going to the intended recipient/merchant.