US Federal Trade Commission Warns of QR Code Fraud
The US Federal Trade Commission (FTC) has issued a warning about the increasing threat of fraud using QR codes. Scammers have been using QR codes to take control of smartphones, carry out fraudulent activities, and obtain personal information. The FTC’s alert, published on their website, cautions consumers to be vigilant and take necessary measures to protect themselves.
QR codes, which are two-dimensional barcodes, have become widely used in various industries such as restaurants, parking lots, stores, and charitable organizations. These codes simplify processes like accessing online menus or making payments. They also have security applications, such as entering accounts on platforms like YouTube and Apple TV.
Unfortunately, scammers have found ways to exploit QR codes for their own gain. They have been actively replacing legitimate QR codes with counterfeit ones, leading unsuspecting individuals to fake websites where funds are transferred to fraudulent accounts. QR codes have also been used in phishing attacks, with emails containing malicious QR codes that redirect users to harmful sites. Antivirus programs often fail to detect these fraudulent links as the QR code is embedded as an image.
The FTC warns consumers to exercise caution when scanning QR codes and emphasizes the risk of being redirected to fake websites or inadvertently installing harmful software. They advise users to verify the destination URL before entering any personal or payment information. Additionally, it is recommended to check the authenticity of QR codes in menus, parking lots, or from sellers to ensure they have not been tampered with. Users should also exercise caution with QR codes embedded within emails and carefully review the application developer before installing third-party QR code apps.
The FBI had previously issued similar warnings about QR code fraud almost two years ago. The recommendations from both agencies include:
- After scanning a QR code, ensure that it leads to the official URL of the site or service.