ITS Offers Tips for Avoiding QR Code Scams

07/22/2024

QR code scams, commonly referred to as "Quishing," exploit the convenience of QR codes to deceive individuals into compromising their personal information or devices.

These scams often promise enticing rewards or discounts but lead unsuspecting users to malicious websites, malware downloads, or phishing attempts. Understanding how to identify and protect yourself from QR code scams is crucial in today's digital landscape. 

What are QR Code Scams ("Quishing")? 

QR code scams, also known as "Quishing," involve cybercriminals tricking individuals into scanning malicious QR codes. These codes can lead to various types of scams, including phishing attacks, malware downloads, or unauthorized access to personal information. 

How Do QR Code Scams Work? 

Scammers create QR codes that appear legitimate and often offer enticing incentives, such as discounts, freebies, or exclusive content. These QR codes can be printed on posters, flyers, or displayed online. 

When scanned with a smartphone or QR code scanner app, the code redirects the user to a malicious website or initiates a download of malware onto their device. This can compromise personal data, install harmful software, or lead to financial losses. 

Types of QR Code Scams 

• Phishing: QR codes can lead users to fake websites designed to steal login credentials, credit card details, or other sensitive information. 
• Malware Downloads: Scanning malicious QR codes can trigger downloads of malware onto your device, compromising its security and potentially stealing personal data. 
• Fraudulent Offers: Scammers may use QR codes to lure users with fake offers or contests, aiming to collect personal information or spread scams. 

How to Spot QR Code Scams 

• Verify the Source: Be cautious of QR codes from unfamiliar sources or those found in unsolicited emails, texts, or social media posts. 
• Check for Red Flags: Look for signs of tampering or poor print quality on physical QR codes. Verify digital QR codes by inspecting URLs before scanning. 
• Be Wary of Unexpected Offers: If an offer seems too good to be true, it might be a scam. Verify offers through official channels or websites. 

Protecting Yourself from QR Code Scams 

• Use Trusted QR Code Scanners: Download QR code scanner apps from reputable sources, such as official app stores. 
• Inspect QR Codes: While scanning, check for unusual URLs, misspellings, or redirects that don’t match the expected content. 
• Enable Security Features: Keep your smartphone’s security features, such as antivirus software and automatic updates, enabled to protect against malware. 

Reporting QR Code Scams 

• Report Suspicious QR Codes: If you encounter a suspicious QR code, report it to the organization or platform where you found it. Many companies have fraud reporting mechanisms in place. 

Recommendations 

• Increase Your Awareness: Stay informed about QR code scams and cybersecurity best practices. Regularly check reliable sources for updates on emerging threats. 
• Be Skeptical of Unsolicited QR Codes: Avoid scanning QR codes from unattended sources (Un-Authorized Flyers, Banner etc.....) or those that arrive unexpectedly via email, text message, or social media. 
• Report Suspicious Activity: If you encounter a suspicious QR code or believe you’ve been targeted by a scam, report it immediately to ask@slu.edu or reach out to 314-977-4000. 

Conclusion 

QR code scams ("Quishing") can pose significant risks to your privacy and security. By staying vigilant and following these tips, you can reduce the chances of falling victim to QR code scams. Always verify the legitimacy of QR codes and be cautious when scanning them, especially when they promise unexpected rewards or incentives. Awareness and proactive measures are key to protecting yourself from cyber scams in today’s digital age.