Cybersecurity

Be Careful When Scanning QR Codes – There’s a New Scam Going Around!

Zachary Kitchen

QR codes are everywhere these days. You can find them on restaurant menus, flyers, and posters. They’re used both offline and online. QR codes are convenient and easy to use. You just scan them with your smartphone camera. You’re then directed to a link, a coupon, a video, or some other online content.

With the rise in popularity of QR codes comes an unfortunate dark side. Cybercriminals are exploiting this technology for nefarious purposes. Scammers create fake QR codes. They can steal your personal information. They can also infect your device with malware or trick you into paying money.

It’s crucial to exercise caution when scanning QR codes. This emerging scam highlights the potential dangers lurking behind those seemingly innocent squares.

QR Code scan
Image source: Adobe Stock

The QR Code Resurgence

QR codes were originally designed for tracking parts in the automotive industry. They have experienced a renaissance in recent years. As a result, they’re used as a form of marketing today.

They offer the convenience of instant access to information. You simply scan a code. They’ve become an integral part of various industries, including retail and hospitality.

Unfortunately, cybercriminals are quick to adapt. A new phishing scam has emerged, exploiting the trust we place in QR codes.

How the Scam Works

The scammer prints out a fake QR code. They place it over a legitimate one. For example, they might stick it on a poster that advertises a product discount or a movie.

You come along and scan the fake QR code, thinking it’s legitimate. The fake code may direct you to a phishing website. These sites may ask you to enter sensitive data. Such as your credit card details, login credentials, or other
personal information.

Or scanning the QR code may prompt you to download a malicious app. One that contains malware that can do one or more of the following:

  • Spy on your activity
  • Access your copy/paste history
  • Access your contacts
  • Lock your device until you pay a ransom

The code could also direct you to a payment page. A page that charges you a fee for something supposedly free.

Here are some tactics to watch out for.

Malicious Codes Concealed

Cybercriminals tamper with legitimate QR codes. They often add a fake QR code sticker over a real one. They embed malicious content or redirect users to fraudulent websites.

Fake Promotions and Contests

Scammers often use QR codes to lure users into fake promotions or contests. When users scan the code, it may direct them to a counterfeit website. The website may prompt them to provide personal information. This can lead to potential identity theft or financial fraud.

Malware Distribution

Some malicious QR codes start downloads of malware onto the user’s device. This can result in compromised security. Including unauthorized access to personal data and potential damage to the device’s functionality.

Stay Vigilant: Tips for Safe QR Code Scanning

Verify the Source

Be cautious when scanning QR codes from unknown or untrusted sources. Verify the legitimacy of the code and its source. This is especially true if it prompts you to enter personal information.

Use a QR Code Scanner App

Consider using a dedicated QR code scanner app. Use that rather than the default camera app on your device. Some third-party apps provide extra security features. Such as code analysis and website reputation checks.

Inspect the URL Before Clicking

Before visiting a website prompted by a QR code, review the URL. Ensure it matches the legitimate website of the organization it claims to represent.

Avoid Scanning Suspicious Codes

Trust your instincts. If a QR code looks suspicious, refrain from scanning it. Scammers often rely on users’ curiosity. Be careful when scanning QR codes that you see in public places. Don’t scan them if they look suspicious, damaged, or tampered with. Exercising caution is paramount.

Update Your Device and Apps

Keep your device’s operating system and QR code scanning apps up to date. Regular updates often include security patches that protect against known vulnerabilities.

Be Wary of Websites Accessed via QR Code

Don’t enter any personal information on a website that you accessed through a QR code. This includes things like your address, credit card details, login information, etc.

Don’t pay any money or make any donations through a QR code. Only use trusted and secure payment methods.

Contact Us About Phishing Resistant Security Solutions

QR codes can be useful and fun. But they can also be dangerous if you’re not careful. Always scan them with caution. Protect yourself from scammers who want to take advantage of your curiosity.

This scam falls under the umbrella of phishing. Phishing is one of the most dangerous modern risks for individuals and organizations. If you need help ensuring your devices are phishing resistant, just let us know.

Contact us today to learn more.


Featured Image Credit

This Article has been Republished with Permission from The Technology Press.

Zachary Kitchen

Get Your Free Cybersecurity Guide

Protect your business with expert tips. Fill out the form to download our comprehensive guide and enhance your cybersecurity.

This field is for validation purposes and should be left unchanged.

By downloading you’re confirming that you agree with our Terms and Conditions.

What business owners are saying about us...

Read testimonials from satisfied clients who trust Digital Crisis for their IT needs. Discover how we’ve helped businesses like yours.

Quote icon

When Our Server Crashed, I Expected Downtime For Days, They Had Us Back in Hours

As a small law firm, we needed reliable IT support that wouldn’t break the budget—but still delivered at the highest level. Digital Crisis gave us exactly that.
 
They helped us modernize our systems, move to the cloud, and streamline how we work. Now our team can securely access everything we need from anywhere—and we’ve never been more efficient.
 
When our server went down unexpectedly, they had us fully operational again within three hours. No panic. No delays. Just fast, professional support when we needed it most.
 
With Digital Crisis, we feel like we have a world-class IT department—without the overhead.
Scott Davenport
Managing Attorney, Davenport Law Firm
Quote icon

We Knew Something Had to Change

As a managing partner of our firm, I needed a technology partner who understood urgency—and our old IT company just didn’t get it. Every time we had an issue, we were forced to submit a ticket just to speak with someone. No one ever answered the phone. Everything felt like a battle, and we were stuck in a long-term contract with no flexibility.

 

When I called Digital Crisis, they picked up immediately. No ticket. No runaround. Just answers. Within minutes, they had already started helping us.

 

Looking back, I wish we had made the switch sooner. I didn’t need to be a tech expert—I just needed to make one good decision for my team. Now our systems are secure, we actually get support when we need it, and I don’t have to worry about IT holding us back.

 

If you’re tired of being ignored by your IT guy, do what I did. Take back control. Call Digital Crisis.

Rudy Culp
Managing Partner, Horrigan & Goehrs, LLP
Quote icon

I Couldn’t Afford IT Headaches When Starting My Firm

As the Managing Partner of a newly established law firm, I can confidently say that the seamlessness of our start-up is due in large part to the exceptional IT support provided by Zach and the team at Digital Crisis. From day one, they have been more than just a service provider—they've been true partners in our success.

Zach and his team have an incredible ability to anticipate our needs before we even voice them. Their proactive approach, deep expertise, and commitment to keeping our systems secure and efficient have given us the confidence to focus fully on building our practice.

Having reliable IT support is critical in the legal field, where security and uptime are non-negotiable. Thanks to Digital Crisis, we’ve had both—plus the peace of mind that comes from knowing we’re in capable hands. We couldn’t ask for a better tech partner.

Stacy Kelly
Mangaing Partner, Texas Probate Attorney, PLLC
Quote icon

They’re a Valuable Member of Our Team

Zach is great at explaining to us about our IT in plain-speak, rather than “geek-speak.” I genuinely feel like hiring Digital Crisis was the best decision I’ve made for my firm. If you want an IT expert who charges reasonable rates and is not just an IT guy, but a valuable member of your team, call Zach.
Keith Morris
Founder, Surplus Attorneys
Quote icon

My Firm Runs Like a Well-Oiled Machine

I’ve worked with Zach for over 15 years. Digital Crisis takes their time to understand my practice and doesn’t try to shove a cookie-cutter system down our throat. When Digital Crisis first came in, they took the time to understand our firm and helped streamline and modernize our processes.
Kelly Forester
Senior Partner, Matthews Forester Law Firm
Quote icon

My Firm’s Efficiency DOUBLED Overnight

I thought my firm was doing just fine with my previous IT setup- boy, was I wrong! Digital Crisis came in Updated Equipment and Technology. I wish I had used them ten years earlier when I first met Zach. You will be sold immediately by their knowledge, patience, and willingness to help.
Craig Ribbeck
Senior Partner, Ribbeck Law Firm
Quote icon

Digital Crisis Saves Us Thousands Every Year

We used to enter data quarterly that would easily take an average of two weeks each quarter to enter. Then, when Digital Crisis came in, they fully automated our process, taking minutes instead of weeks to process the same data, not only faster but more accurately, removing room for human error. The new system gets things done faster and saves us thousands every year in labor alone!
Sandy Hickey
Executive Assistant, PAS Online
Quote icon

We Make Money FASTER Because of Digital Crisis

In 2010, my business had an old DOS-based server from 1995 that ran our proprietary software, which crashed. If it weren’t for Zach, we’d have to start completely over! Not only was Digital Crisis able to restore all our data, but they were also able to migrate us to a modern system which allowed us to get paid faster and work remotely.
Sandra Van der Vorm
Owner, Vansteen Marine Supply
Quote icon

They Rescued My Practice

On a Friday, my practice had to be moved immediately without any notice. Digital Crisis not only managed to come out and get our IT up and running, but they had our phones and internet up and running by Monday morning, and we didn’t lose a single day of business!  I can’t recommend Zach and his team enough.
Marietta Cline, MD
Owner, Cline Pediatrics
Quote icon

I Never Lost a Day of Work During the Pandemic

Zach truly understands my firm’s needs and always provides valuable tips and tools to make my firm run more efficiently. For example, when the COVID pandemic hit in 2020, I didn’t lose a single day of work since Digital Crisis had me set up on their cloud system, and I could remote in from anywhere.
Pamela Stewart
Owner, Law Office of Pamela Stewart

Protect Your Network Against Cyber Threats

Contact Digital Crisis for a network security consultation and ensure your business is safeguarded against cyber threats.

This field is for validation purposes and should be left unchanged.