## What is a QR Code?

A QR code is a means of sharing a link to a web page that only requires the user to scan the image—like the one seen above—with their mobile device’s camera. It’s a simple and elegant solution to the problem that a lengthy URL introduced to sharing information, especially now that the capability to scan one is baked right into most cameras.

However, the simplicity and ubiquity of the QR code has led to a new problem… the use of QR codes as a means of scamming people

### Introducing the QR Code Scam, and How It Can Be Spread

Putting the QR code scam in a nutshell, it's a QR code that’s linked to a malicious website, often used as part of a spoofing attempt to gain the victim’s information or as a means of spreading malware that automatically downloads to your device once the page loads

*Because this subset of phishing scam only requires the target to scan a QR code, it can be spread through various means:*

**Emails** - Like other phishing attempts, many QR code scams are spread through emails, but other forms of direct messages aren’t exactly exempt, either. NEVER scan a code that appears in an unsolicited email… particularly if the message pressures you to do just that.

**Public Displays and Posters -** Due to the fact that a QR code can—and nowadays, typically does—appear practically everywhere, it is not uncommon for scammers to simply use a sticker to replace an existing QR code with one of their own, whether it appears on a poster, a restaurant’s menu, or other form of signage. Closely examine any code you consider scanning, or better yet, look up what the QR code allegedly directs to separately.

### There are a Few Reasons QR Code Scams are So Effective

Let’s face facts: nowadays, QR codes are hard to avoid, and it really is hard to argue against their convenience. It’s the fact that they’re used so often that makes these kinds of scams so dangerous.

Just like regular links in an email, malicious QR codes are highly tempting to navigate through, making them an effective option for the cybercriminal responsible. Adding to the issue, a QR code can be altered to direct someone to someplace entirely different than what may be expected. Once scanned, these QR codes can install botnets and keyloggers, allowing your device to be co opted into large-scale attacks or information to be stolen

### There are a Few Reasons QR Code Scams are So Effective

**Don’t Mix Apps with QR Codes -** Your phone has a camera, which has a built-in QR code scanner. Applications intended to serve as your QR code scanner can easily be malicious themselves. Likewise, you should avoid installing any applications via a QR code, instead finding them in the actual app store (if you install them at all).

**Take Urgency with a Grain of Salt** - Like other phishing methods, a QR code scam will frequently be paired with a message that implies it is important to scan the QR code immediately. Don’t fall for the temptation to act so quickly. Instead,verify the message and the QR code through different means of communication.

**Don’t Be Afraid to Ask -** If you aren’t sure if a QR code can be trusted, don’t be afraid to confirm its legitimacy and authenticity by asking someone who would know.

### Don’t blindly trust any QR codes you see! Be smart about what you scan!