QR codes have become an integral part of business operations in recent years. With QR codes becoming more popular, fraudsters have started manipulating them to scam people, which has led to an increase in QR code scams. Since you don’t know what the QR code is for, and most QR codes have the same appearance, that leaves you more susceptible.
Is it safe to scan QR codes? How can you prevent being duped by a manipulated QR code? And what should you do if you have scanned a fake one?
Are QR Codes Safe to Scan?
QR codes are generally considered safe to scan, but their easy manipulation makes them potentially insecure. Whether a QR code is safe depends entirely on where and why you want to scan it.
If you’re scanning a QR code while shopping at a mall, purchasing a drink at a bar, or paying for a coffee at a local store, it’s most likely safe. However, if you’re scanning a QR code for a payment on a shady website, downloading an app from a suspicious source, or redeeming a coupon from a third-party website, the code could be manipulated.
Scanning an unsafe QR code can infect your device with malware, steal data from your browser, fraudulently transfer money from your bank, hack into your device with malicious intent, and more. That’s why you should ensure the code you are going to scan is safe before you scan it.
But if you fall for the scammer’s trap and scan a manipulated QR code, what should you do?
What Should You Do if You’ve Scanned a Modified QR Code?
Given how lookalike QR codes appear and how scammers smartly manipulate them, it’s common to fall victim to them once in a while. If you suspect you may have scanned a fake QR code, you’re able to take a few steps to minimize the risk of bearing financial harm or compromising your privacy.
1. Turn Off the Internet on Your Device
The first step after scanning a fake QR code is to disconnect your device from the internet. Most often, scammers use manipulated QR codes to hack into the devices of their victims. If the code you scanned also yielded the same result, scammers might have gained access to your device, putting your personal information at risk.
By disconnecting your device from the internet at the right time, you’re able to also cut off the scammer’s access to it. If you want, you can alsomanually check your Windows device for signs of hacking.
2. Change Your Passwords
If you suspect scammers may have had access to your device for a long time, you must immediately change all the passwords you’ve saved in browsers, password managers, apps, etc. This way, even if scammers breach and export critical passwords, such as those for bank accounts or social media profiles, they won’t be able to access your accounts.
While changing passwords, log out from all devices to ensure that scammers haven’t already logged into any of your accounts.
3. Minimize the Risk of Financial Loss
Block your credit cards if you have saved their details in your browser. If scanning the QR code resulted in suspicious autonomous transactions, immediately contact your credit card company or bank for a refund. Likewise, change any financial or personal information saved on your browser that scammers can easily manipulate and use against you.
If scanning a QR code deducted more money from your account than it was supposed to, contact the relevant company to get a refund.
4. Scan Your Device for Viruses
Next, scan your device with a reliable antivirus program. If your device has been infected by scanning the QR code, checking it with an antivirus program will likely remove it. If your device is running Windows,use the built-in security scanner, Microsoft Defender, to scan for malware.
If scanning the QR code downloaded anything onto your computer, delete it immediately. If it ran a script within an application, uninstall the application and reinstall it.
5. Check Your Browser for Suspicious Changes
Scammers also attempt to hijack the browsers of their targets so they can spy on their activities later on. So, you should look for signs of browser hijacking. If your browser appears to have been compromised, you should act swiftly toget rid of the hijackerand clean your browser thoroughly.
If the QR code redirects you to a different source than what it was supposed to or doesn’t take you to the official site, navigate away from it and avoid visiting it in the future.
6. Check for Unusual Changes in Device Settings
Last but not least, you should review all the critical settings on your device, especially privacy-related ones, and make sure no suspicious changes have been made. If you have scanned the QR code in an app, such as your browser, check the app’s settings to see whether scammers have changed them.
Sometimes, fraudsters aim to compromise your security by hijacking your webcam, so turn it off temporarily to rule out this possibility.
How Can You Avoid Falling Victim to a QR Code Scam?
Using your common sense and trusting your gut should be enough to distinguish the fishy QR codes from the real ones, preventing you from becoming a victim. If the source where the code resides looks shady, it would likely be exploited—only scan QR codes from trusted sources.
You mainly need only your cell phone camera to scan the QR code. Don’t use any third-party QR code scanning apps, as they could be modified and altered to set up malicious ploys. Also, do not scan any QR code that appears to be changing continuously.
If an app or website provides other options to perform the same function as scanning the QR code, skip scanning and opt for alternative methods. Typically, websites and apps offer multiple ways to perform a particular action. If you are forced to use QR codes and the source appears sketchy, be on the lookout, as it could be a scammer’s trap.
Lastly, make sure your security software is always on and fully updated. Doing so will prevent your device from being infected or hacked if you mistakenly scan a fake QR code.
Save Yourself From QR Code Scams
QR code fraud can have serious repercussions, so it’s essential not to fall victim to one. Distinguishing fake QR codes from the real ones will keep you safe.
If you mistakenly scan a fake one, you now know what steps to take to prevent your financial and personal data from being compromised. Also, by strictly following the guidelines above, you’re able to mitigate the risks associated with QR code exploitation, reducing the possibility of being a victim.
Lastly, be sure you protect yourself and inform your loved ones, especially elderly ones, about QR frauds so that they can also stay safe.
