BBB: Beware of fake QR code scams |
The Better Business Bureau of Eastern North Carolina is warning consumers about fake QR codes.
Businesses use QR codes to direct consumers to their apps, track packages, or view menus. But because these codes cannot be read by the human eye, they have become a way for crooks to conceal malicious links.
As QR codes become more and more popular, BBB Scam Tracker is seeing more and more reports of scammers using them to deceive consumers.
How the scam works:
You receive an email, direct message on social media, text, leaflet or letter containing a QR code. You are supposed to scan the code with your phone’s camera and it will open a link.
In some scams, the QR code directs you to a phishing website, where you are asked to enter your personal information or login credentials for the crooks to steal. Other times, crooks use QR codes to automatically launch payment apps or track a malicious social network account.
These scams differ greatly, but they all have one thing in common. The crooks hope you scan the code right away, without taking a closer look.
QR codes often appear to be from legitimate sources, so make sure any matches are legitimate before scanning the code.
For example, a victim told BBB Scam Tracker that she received a fraudulent letter regarding the student loan consolidation. It contained a QR code that appeared to be related to the official Studentaid.gov website. The QR code helped the program, which was a fraud, to appear official.
Additionally, Bitcoin addresses are often sent via QR codes, which makes QR codes a common feature in cryptocurrency scams. A consumer who was contacted by a ‘binary and forex trader’ via Instagram regarding an investment opportunity said: ‘after paying the withdrawal fee through the Bitcoin machine and sending it to the QR code that m ‘was provided, I received another email saying I needed to pay a transfer fee. That’s when I realized something was wrong.
How to avoid QR scams:
- Create a contact. If someone you know sends you a QR code, also confirm before scanning it. Whether you get a text from a friend or a social media message from your coworker, contact that person directly before scanning the QR code to make sure they haven’t been hacked.
- Don’t open links from strangers. If you receive an unsolicited message from a stranger, do not scan the QR code, even if it promises you interesting gifts or investment opportunities.
- Check the source. If a QR code appears to be from a trusted source, it’s wise to check it out. If correspondence appears to be from a government agency, call or visit their official website to confirm.
- Beware of short links. If a shortened URL link appears when you scan a QR code, understand that you cannot know where the code is taking you. This could hide a malicious URL.
- Beware of advertising material that has been tampered with.
To learn more about protecting your information online, read the BBB’s advice on data privacy and cybersecurity.
If you have been the victim of a QR scam, report it to BBB.org/ScamTracker. Your report can help educate and protect your fellow consumers.
Better Business Bureau Serving Eastern North Carolina is a not-for-profit corporation serving 33 counties in Eastern North Carolina. The organization is funded primarily through BBB accredited business fees from over 4,200 local businesses and professional firms. BBB promotes integrity, consumer confidence and business ethics through the self-regulation of business in the local market. Services provided by BBB include business and charity reporting, general market advertising monitoring, consumer / business education programs, and dispute resolution services.
All services are provided free of charge to the public, with the occasional exception of mediation and arbitration. Visit bbb.org.