How QR-Code Scams Steal Information—and How to Avoid Them

Summary

QR-code scams can use stickers in public places or codes sent by email and SMS to direct people to fraudulent sites, steal personal information, or install malware. The article recommends checking URLs and scanning codes only from trusted sources.

Key points

• Scammers may cover legitimate public QR codes with stickers that redirect users to fraudulent websites.
• QR codes sent by email can conceal malicious links in embedded images, a tactic called “quishing.”
• The article says QR-code scams may steal personal information, install malware, or target victims’ finances.
• DarkOwl reports seeing discussions and service advertisements related to QR-code fraud on an onion forum and Telegram.
• The article recommends checking URLs for suspicious spellings or misdirection and confirming they use HTTPS.
• It advises against scanning codes from strangers or downloading files prompted by QR codes, and recommends that employees verify public QR-code destinations.