Be Careful When Scanning Unknown QR Codes

Racks in a clothing store are blurry in the background. Person holding an iPhone is in the foreground. Screen reads QR code in black and a big red SCAM! banner across the actual QR code. Behind the phone is a large QR code on a white background with big red text above and below the QR code reading think before scanning

QR codes, those square, blocky codes you scan with your iPhone’s camera to load a Web page, have become ubiquitous. So much so that we seldom pause before scanning any QR code we see. But if you think about it, that’s the same as clicking random links in emails or texts, which is a terrible idea from a security perspective. “Quishing” (QR code phishing) isn’t commonplace yet, but some sources say there are thousands of cases per month. To avoid falling victim to a quishing scam, only scan QR codes from trusted sources, try to verify what a code will do once scanned, and evaluate the yellow URL preview Safari provides (when using other browsers, all you see is Open in Browser Name). Finally, always install iOS security updates promptly because they often address vulnerabilities that could be exploited with malicious data.

(Featured image based on an original by iStock.com/B4LLS)

2 Comments

  1. Thanks Tim! It never occurred to me that people would use QR codes in this way. I appreciate it and will keep that in mind.

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.