Tips to keep your money safe…
With the alarming emergence of new scam techniques, Marc Porcar, CEO of QR Code Generator has revealed to ATV Today Finance some expert tips to avoid falling victim to false codes and email phishing scams.
Avoid payments using public QR codes
QR codes in public spaces are particularly vulnerable to tampering by scammers. With payment being one of the prime purposes of QR codes, make sure any code you scan in public is untampered.
If scanning a publicly placed QR code, such as when parking, responding to advertising, or at a restaurant, ensure that the code is the correct one you wish to scan. Before entering any personal information, check that no stickers are covering the original code or if the website it directs you to looks suspicious. A QR code planted by a scammer can direct you to an official-looking but phony website, which can steal your payment details when entered.
QR codes created for such scams could be found in restaurants, shops, bars, or any other public place. Parking scams, however, are particularly on the rise. If in doubt, do not pay through a QR code and try to pay with cash.
Beware of suspicious emails and texts
Email inboxes are often bombarded with links and attachments that may be malicious. While most email services can detect these, not all of them get caught, and this is especially true for QR codes.
Always v: Do I know the sender of this email? If so, are they who they claim to be? Many scams claim to come from a trusted retailer like Amazon or Government agencies.
Only in the month of January until now, there have been alerts about at least two scams claiming to be from official offices such as the Department of Pension Protection and the Driver and Vehicle Licensing Agency (DVLA). Remember to double-check the email address from where these are sent, and when in doubt, contact the agency directly for more information.
Check the destination of any QR code
Your phone will display the URL to which a QR code is trying to send you and only take you there if permitted. Check the URL is legitimate by looking out for extended domain names. Multiple hyphens and symbols are common in malicious links, and known names may be included in the URL to trick you, just because a URL has ‘Google’ in it, it does not mean it is legitimate, so look out for suspicious URLs.
It is possible to end up on a malicious website, even after taking great care, so when you have landed on a site through a QR code, remain vigilant. Unprofessional design, low-resolution images, poor grammar, or typos can be telltale signs of a fraudulent website.
Do not be a victim of your own curiosity and trust your instincts
The ultimate purpose of a scam is to make you believe that what you are reading is true and official. If email scammers may entice or worry victims, scanning a QR code may be incentivized with the promise of a reward, or by creating curiosity to bypass your suspicions.
Be extremely wary of any official looking email, such as from Government agencies, and of QR codes that gives you the chance to ‘win’ anything, offers up a survey, or particularly promises free goods or services.
Generally, any person who uses the internet knows to question to anything you might find suspicious on it. Because of this, when you’re not sure whether you can trust an email, a message, a website and so on, don’t.
You do not need a QR code app
Your phone’s camera is capable of scanning and following QR codes. The misconception that you might need a new app to do this can lead to downloading fraudulent software that asks for extensive permissions and may try to install malware on your device. Always use your phone’s default camera for QR code scanning.
