QR (Quick Response) codes have been of great benefit for the e-payments ecosystem in Digital India. They have enabled even small vendors, who would think twice about investing in card swiping or POS machines, to simply stick a QR code on their counter and accept electronic payments. But like every great invention, it’s a great servant but a bad master. Scamsters have found ways to cheat users who are not aware of the possibilities of online fraud.
Some ingenious QR scams
Every time we think we have seen it all in the world of digital scams, a new one emerges that is trickier than the last. The following are only some examples of QR code related scams:
- Scamsters substitute the real QR codes with fake ones that lead you to malicious websites with screens that are similar to the real ones. Then you are prompted to provide personally identifiable information (PII), which is misused.
- Sometimes fake QR codes direct you to websites, which may include malware that directly downloads the content of your smartphone. This information is later used by scamsters in various ways.
- A scamster could ask you to share your QR code in order to receive a payment or a free cash reward. Then, you will receive a request to provide your password to complete the transaction. With both these pieces of information – the QR code and PIN/password – the victim’s bank account is left wide open for theft.
How to avoid getting trapped in a QR code scam
- When you share your QR code to receive money, never type in your PIN. It is only required when you are due to pay, not receive.
- Only scan the QR code box of retailers that you know and trust.
- Check twice before you scan codes in public places, such as bus depots, train stations or any crowded place where there is a chance of sticker being replaced with the fake ones by scamsters.
- Be especially careful with codes that are printed on a removable sticker.
- If you scan a code and are directed to a web page that asks for personal information, such as your password, don’t key in this information.
These and other precautions for PII can protect you from such fraud. Further, if you come across QR codes attached to a product, advertisement, poster or building, that appear fake, take the effort to warn the owner of the site. It may help someone else to stay safe.
