Think Before You Scan: The Rise of Advanced QR Code Scams

Cybersecurity is a lot like playing whack-a-mole. Every time you think you have succeeded in dealing with a security issue, another one pops up, and then another, and the game continues. So, what has popped up this time? 

Well, thanks to all the cybersecurity education over the years, many people have learned how to spot suspicious website links, and the traffic to these sites has reduced. Since cybercriminals are always evolving their tactics, they have realised that while people can read links, they cannot scan barcodes. As such, they have now started hiding their malicious links inside QR codes, thus giving rise to the cybercrime we know as quishing, a play on ‘QR code’ and ‘phishing.’ 

But what exactly is this, and is there any way you can avoid getting scammed?

How Do QR Code Scams Work?

Quishing poses a significant threat because it exploits our psychology. And in fast-paced industries where such threats can be disastrous, people have to be especially careful. 

Take the aviation industry as an example. Airlines trust organisations like Magnetic Engines to maintain their aircraft engines through services such as repairs and overhauls, which you can learn more about at magneticengines.co. Technicians in these organisations often rely on QR codes on aircraft engines to pull up information on safety, history, and other critical data. So, if someone were to swap out just one code, they could redirect the technician to alter the engine or even steal organisational credentials in a few easy steps. 

So, how are scammers able to do this? It all starts with placing a fake QR code where you would expect to see one, making it less likely you will be suspicious. Examples include:

• On parking meters.
• In charging stations.
• On restaurant tables.
• On delivery packages and mail.
• In emails claiming to be from formal organisations.

Since QR codes in these and other locations look normal, you scan the code without thinking, only for it to lead you to a website that looks like the real site, but is a fake. Once here, the site prompts you to provide data ranging from card numbers to usernames, passwords, names, addresses, and Social Security numbers. As soon as you submit the information, you unknowingly send it to scammers who can use it for illegal purposes, including making fraudulent purchases, opening fraudulent lines of credit, and even selling your data. In some cases, scammers use these codes to download malware onto your device, thus enabling them to access it remotely.

How Can You Tell What Is Real?

While you cannot read QR codes directly, there are ways you can tell what is fake from what is real. Below are the two most effective approaches.

Inspect the Code

Business codes are often printed on the signage and not added as an afterthought. That means that if you come across a sticker on a plastic sign or a metal meter, you need to be cautious. You might want to pay closer attention to it for signs of tampering, such as contrasting with the business branding, misalignment, peeling at the edges, or looking off for one reason or another. If you have room for doubt, it is best not to scan the code.

Preview the URL

As much as you cannot read a QR code, each time you scan one, you will see a pop-up with a preview of the web address. Often, people will click ‘visit’ without looking at the URL. But this is when you need to pay attention. If it features a link shortener like bit.ly or shows a strange website link, do not tap it, as it likely leads to a fake website. 

Anytime you feel uncomfortable with scanning a QR code, you are better off safe than sorry. Rather than continuing the scan, open your mobile browser and type the official web address of the site you wish to visit, as this guarantees you reach the official website.

Technology Perspective

Technology continues to transform industries through artificial intelligence, cloud computing, automation, cybersecurity, digital platforms, and data-driven decision making. As organizations increasingly adopt digital solutions, understanding emerging technologies becomes essential for businesses, professionals, and consumers. DGM News regularly covers these developments through expert analysis, technology news, and educational resources.

Innovation Outlook

Rapid advances in artificial intelligence, automation, machine learning, cloud infrastructure, and digital transformation continue reshaping global industries. Monitoring these developments helps organizations adapt to changing technologies, improve efficiency, and prepare for future innovation.

Did you know?

Artificial Intelligence is expected to influence nearly every major industry over the coming decade, from healthcare and finance to transportation, manufacturing, education, and entertainment.