QR code safety: scan or skip?
What are QR codes?
Short for quick response codes, QR codes are a type of barcode that houses information that digital devices can read. Most often square-shaped and made up of black and white geometric patterns, QR codes store data of various types, including phone numbers, text and website URLs.
How are QR codes typically used?
Originally developed for labeling automotive parts, QR codes can now be found everywhere from restaurant menus to billboards. Typically, QR codes are used to enable consumers to access a website or mobile application without needing to enter a web address.
Scanning a QR code is as easy as opening the camera app on your smartphone. Simply use the phone’s camera to view a QR code up close, keeping the code in the camera’s frame for a few seconds. The data stored within the QR code will soon appear on your screen, enabling you to tap to open the link, dial a phone number or read stored text.
Are QR codes safe to scan?
Generally, QR codes are safe to scan as long as they’re from a trusted source. The QR codes you find at restaurants, on direct mail pieces from companies you recognize, and even within television commercials are most likely safe to scan.
While scanning codes from trusted sources is generally safe, scammers can use QR codes to trick people into opening unsafe web links. Just as you shouldn’t click on a suspicious-looking link, it’s best not to scan a QR code of unknown origin.
Consumers should be especially suspicious of QR codes embedded in emails and social media posts, even those coming from friends and family. Typically, emails and social media posts should contain visible website URLs since they are already digital formats. Scammers might add a QR code to an email or social media post in the hope of tricking recipients or viewers into scanning the code.
How scammers might use QR codes
Unfortunately, bad actors are always looking for new ways to steal personal information, such as usernames and passwords or bank account and credit card numbers. As QR codes have become more common and more widely recognized, scammers have used them to promote unsafe URLs and mobile applications. Users who visit these links or download these applications may have their devices and accounts compromised.
Scammers may also use QR codes within phishing emails to trick unsuspecting people into navigating to unsafe links. Many of us have learned to be wary of suspicious or misspelled website URLs, so phishing scammers might try to disguise unsafe links with QR codes. Learn more about phishing schemes here.
What to do if you scan a suspicious QR code
Don’t panic. QR codes are simply pathways to websites and mobile applications. If you haven’t clicked anything, you should have nothing to worry about. Simply close the camera app and you should be okay.
If you do click on a link that appears after scanning a QR code, avoid filling out any form fields that appear and deny any requests to download applications to your phone.
QR code safety best practices
QR codes are a great way to view digital information from a physical medium. And while QR codes from trustworthy sources are useful, untrustworthy QR codes may pose a risk. Here are some best practices to keep in mind when you see a QR code:
- Only scan QR codes from trustworthy sources, such as at a restaurant to view the menu
- After scanning, review the information that appears on your phone screen closely before tapping to open any links
- If the scanned link looks suspicious or doesn't match where the QR code says it will go, don't open it
- Avoid scanning QR codes that are embedded in emails or social media posts, even if you trust the sender — their account may have been hacked
- If you’re unsure or uneasy about scanning a QR code, don’t scan it
Share
