QR Code Cautions

WHAT ARE QR (Quick Response) CODES?

According to BusinessInsider.com:
“QR codes are a type of barcode, or scannable pattern, that contain various forms of data, like website links, account information, phone numbers, or even coupons.   QR codes are found everywhere from menus to social media to billboards but have picked up popularity during the pandemic for their contactless nature.  To scan a QR code with your iPhone or Android, you'll want to use the QR code lens feature of your camera or download a QR code reader app.”

With the recent use of a QR code in a commercial during the Super Bowl on Sunday, February 20, 2022.  The commercial was very effective with so many scanning the QR code and going to the advertiser's website that it crashed the site.  

For years there has been some discussion that QR codes could be used to compromise mobile devices.  With the  success of the Super Bowl ad it is likely QR codes will likely grow in popularity.   The QR codes are a great technology to provide quick access to online information.   They can be a great tool and we have used them on City sites.  But just like all useful technology,  bad actors are out there creating ways to cause harm - often to get your information or damage your mobile device both with the ultimate desire to make money off you.   

QR codes can still be used - but please follow some common sense tips.  

THE FBI'S TIPS FOR SAFELY USING QR CODES

Back in January, the FBI released an alert on how Cybercriminals Tampering with QR Codes to Steal Victim Funds, that included the following tips on how to protect yourself:

  • Once you scan a QR code, check the URL to make sure it is the intended site and looks authentic. A malicious domain name may be similar to the intended URL but with typos or a misplaced letter.
  • Practice caution when entering login, personal, or financial information from a site navigated to from a QR code.
  • If scanning a physical QR code, ensure the code has not been tampered with, such as with a sticker placed on top of the original code.
  • Do not download an app from a QR code. Use your phone's app store for a safer download.
  • If you receive an email stating a payment failed from a company you recently made a purchase with and the company states you can only complete the payment through a QR code, call the company to verify. Locate the company's phone number through a trusted site rather than a number provided in the email.
  • Do not download a QR code scanner app. This increases your risk of downloading malware onto your device. Most phones have a built-in scanner through the camera app.
  • If you receive a QR code that you believe to be from someone you know, reach out to them through a known number or address to verify that the code is from them.
  • Avoid making payments through a site navigated to from a QR code. Instead, manually enter a known and trusted URL to complete the payment.

AARP has also published an article about QR codes if you want to read more information, check out the article here.