QR codes. Some people love them, some people still haven’t figured out how they work. The tech-savvy among us might scoff at those folks, but at least they won’t be victims of the latest way hackers are stealing from us.
People across the US have received packages containing a ring and a few cards, one of which has a QR code on the back. Curious to find out why this unexpected gift arrived, they scanned the code with their phone and gave hackers access to personal information that could be used to access their bank accounts.
Seems like something that would be easy to avoid – by now we should all be suspicious of boxes we didn’t order. But these same hacker groups affix phony QR code labels over real ones. According to the FBI, scammers can not only access your information through these links, but also drop a computer intrusion software that can alter your phone and steal credentials.
There have already been about $150 million in reported losses from such scams, and that’s not surprising because QR codes are everywhere these days, from advertising posters to restaurant menus.
How To Avoid QR Scams
The most obvious safety precaution is to just not use them – are they really that necessary in most situations? Are the few seconds saved by scanning a code worth risking a personal data breach?
But if you must…at least don’t scan those that arrive unsolicited, as in a mystery package. And carefully look at the code sticker if it’s on a box – was a new one pasted over an old one? Does the sticker look too shiny? Does it show any odd colors or misspellings? If there is any doubt about its authenticity, leave it alone.
And, as with any other email or snail mail that claims to be from a government organization, insurance provider or other business entity, question any claims of missing payments or account irregularities that can be addressed via QR code. Call or email to verify whether this request is genuine.
Ironwall by Incogni constantly monitors a wide range of scams designed to steal your personally identifiable information. Keep checking back here to stay informed.
And remember – with online privacy protection, your personal data is not so easily obtained, tracked, shared or sold. If your organization has not yet signed up for our protection service, please consider doing so now.
