Accurate, Focused Research on Law, Technology and Knowledge Discovery Since 2002

FTC Warns be skeptical about QR codes

The Verge: “The Federal Trade Commission (FTC) warned the public against scanning any old QR code in a consumer alerts blog last week. Naturally, the warning comes down to security and privacy — bad actors can put QR codes in inconspicuous places or send them via text or email, then just sit back and wait for a payday in the form of money, logins, or other sensitive information. The New York Times reported that John Fokker, who heads threat intelligence at cybersecurity company Trellix, says Trellix found over “60,000 samples of QR code attacks” in the third quarter this year alone. The Times wrote that the most popular scams involved payroll and HR personnel impersonators and postal scams, among others. Early last year, police in several Texas cities said they’d found fraudulent QR codes placed on parking meters, directing people to a false payment site.”

FTC: “Scammers hide harmful links in QR codes to steal your information. QR codes seem to be everywhere. You may have scanned one to see the menu at a restaurant or pay for public parking. And you may have used one on your phone to get into a concert or sporting event, or to board a flight. There are countless other ways to use them, which explains their popularity. Unfortunately, scammers hide harmful links in QR codes to steal personal information. Here’s what to know. There are reports of scammers covering up QR codes on parking meters with a QR code of their own. And some crafty scammers might send you a QR code by text message or email and make up a reason for you to scan it. These are some of the ways they try to con you:

  • they lie and say they couldn’t deliver your package and you need to contact them to reschedule
  • they pretend like there’s a problem with your account and you need to confirm your information
  • they lie, saying they noticed suspicious activity on your account, and you need to change your password
  • These are all lies they tell you to create a sense of urgency. They want you to scan the QR code and open the URL without thinking about it…”

Sorry, comments are closed for this post.