How Cybercriminals Are Tampering With QR Code To Steal Your Money, Read Tips To Stay Safe

Cybercriminals are tampering with Quick Response (QR) codes to redirect victims to malicious sites that steal login and financial information.

A QR code is a square barcode that a smartphone camera can scan and read to provide quick access to a website, to prompt the download of an application, and to direct payment to an intended recipient. Businesses use QR codes legitimately to provide convenient contactless access and have used them more frequently during the COVID-19 pandemic. 

However, cyber criminals are taking advantage of this technology by directing QR code scans to malicious sites to steal victim god data, embedding malware to gain access to the victim’s device, and redirecting payment for cybercriminal use. 

ALSO READ: How To Report Your Cyber Fraud Complaint With RBI, SEBI & IRDA

Modus Operandi

1. Cybercriminals tamper with both digital and physical QR codes to replace legitimate codes with malicious codes. 

2. When victims scan what they think to be a legitimate QR code, but the tampered code directs victims to a malicious site, which prompts them to enter login and financial information.

3. Malicious QR codes may also contain embedded malware, allowing a criminal to gain access to the victim’s mobile device and steal the victim’s location as well as personal and financial information. 

4. Cybercriminals leverage the stolen financial information to withdraw funds from victims’ accounts or deceive victims into making fraudulent payments.

Suggestions

1. After scanning a QR code, check the URL to make sure it is the intended site and looks authentic.

2. Practice caution when entering login, personal, or financial information on a site opened using a QR code.

3. Ensure the QR code has not been tampered with, such as with a sticker placed on top of the original physical QR code.

4. Avoid downloading an app from a QR code. Use your phone’s app store for a safer download.

5. Verify with the company (through contacts on official websites) if payment for an article/service is requested via QR Code.

6. Verify by calling a known number (of sender) that the sent QR code payment link is authentic.

7. Avoid making payments through a site navigated to from a QR code. Instead, manually enter a known and trusted URL to complete the payment.

8. Report any such incidents on the cybercrime.gov.in portal and follow @CyberDost on Twitter, YouTube, Facebook, Instagram, Public, Koo and LinkedIn to know more about safety tips.

The writer: Ankit Kumar, Constable, Cyber HQ, Lucknow

Follow The420.in on

 Telegram | Facebook | Twitter | LinkedIn | Instagram | YouTube