Taboola above article placeholder

Red alert for iPhone and Android users with millions urged to follow 4 new rules

Anyone with an iPhone or Android device must be careful before scanning popular QR codes.

Comments
By David Snelling, Technology Editor

QR code scams

QR code scams (Image: GETTY)

They are probably one of the best inventions in years, but it seems QR codes can offer up a nasty surprise. These scannable images can be found almost everywhere, allowing Android and iPhone users to quickly find websites, download apps, pay for parking, and even enter competitions by simply hovering their smartphone camera over them. They save loads of time and hassle, but it appears there is a darker side to QR codes, with millions thought to have been targeted by fake versions which attempt to steal data.

One of the most concerning new scams is called “brushing”. This is where a parcel or package is sent to homes that includes a fake QR Code. The packages are usually shipped without any sender information. This is a deliberate tactic of the cybercriminals as recipients are more likely to scan the QR code in a bit to find out who the package is from or return it to the sender.

Sadly, those tricked can end up handing over personal information to cyber crooks, which can then be used to steal money.

Recent research from cybersecurity company NordVPN confirmed the worrying trend is continuing to rise, with the team saying that over 26 million people may have unknowingly been lured to malicious websites via these fake QR codes.

“QR codes have become a silent gateway for cybercriminals. Unlike traditional phishing emails where we've learned to spot red flags, a physical QR code feels inherently trustworthy,” says Marijus Briedis, chief technology officer at NordVPN.

“Treat every unexpected QR code with the same suspicion you would treat a link from an unknown sender in your inbox.”

If you are concerned about scanning things on your phone, there are some simple new rules to follow with NordVPN offering these tips.

A quick history of QR codes

The QR code - full name Quick Response code - was originally invented all the way back in 1994 by Masahiro Hara and his team at Denso Wave in Japan. The codes were designed to track automotive parts more efficiently than traditional barcodes.

Unlike standard barcodes found on the back of your supermarket shopping items, QR codes can store large amounts of data and be scanned quickly from any direction.

Denso Wave chose not to enforce patent rights, allowing widespread adoption. Initially, they were just used in manufacturing but QR codes quickly spread to marketing, payments, tickets, and authentication. Their global popularity surged in the 2010s and exploded during the COVID-19 pandemic for contactless menus, check-ins, and payments.

Apple's John Ternus shares insight into the new iPhone

4 TOP TIPS TO STAY SAFE FROM QR CODE SCAMS

• Before you scan a QR code, make sure you know where it came from. Is it from a business you trust or someone you don’t recognise? If you’re unsure, don’t scan it. Reach out to the sender through their official contact information.

• Most smartphones let you see a link to a website before you open it. Take advantage of this feature. If the link looks odd or isn’t what you expected, don’t continue.

• Make sure your phone’s security software is always up to date. Use a VPN when browsing the internet. These steps help protect you from dangerous websites and data theft, even if you accidentally open a harmful site.

• Help your friends and family stay safe by sharing these tips, especially with anyone who isn’t very comfortable with technology. Scammers often go after people who don’t know about these tricks.

Yes, QR codes make life simple, but the advice is clear. Be careful before you scan anything on your smartphone and don't hand over personal data without checking who is behind the code.

Comments

Daily Express uses notifications to keep you updated