Beware of QR Code Phishing Scams!

by

As technology evolves, so do the tactics of cybercriminals. One of the latest threats to be aware of is QR code phishing. These seemingly harmless codes can lead to serious security breaches if you’re not careful. Here’s what you need to know to stay safe:

What is QR Code Phishing? 

QR code phishing involves scammers creating malicious QR codes that, when scanned, direct you to fraudulent websites designed to steal your personal information. These codes can be found anywhere – on posters, flyers, emails, or even websites.

How to Spot a Phishing QR Code

  1. Check the Source: Only scan QR codes from trusted sources. If you find a QR code on a random flyer or email, think twice before scanning.
  2. Verify the URL: After scanning, check the URL before clicking any links. Look for misspellings or unusual domain names.
  3. Use a QR Scanner with Security Features: Some QR code scanner apps can detect malicious links. Consider using one of these for added security.

Tips to Stay Safe

  • Be Skeptical: If something seems too good to be true, it probably is. Be cautious of QR codes promising free gifts or discounts.
  • Consider the context: Exercise caution if the QR code lacks context or appears out of place, such as QR codes randomly placed in a public area
  • Don’t Pay: Avoid sites accessed through QR codes that request payments. Instead, enter a known and trusted app or website to make purchases or pay bills.
  • Watch for Overlays: Be wary if the QR code is placed over existing signs or labels, as scammers may try to cover up legitimate information to trick you.
  • Deny Permissions: Be skeptical of QR codes that ask for excessive permissions (e.g., access to your camera, contacts, or location) beyond what is necessary.
  • Educate Yourself: Stay informed about the latest phishing tactics. Knowledge is your best defense.
  • Report Suspicious Activity: If you encounter a suspicious QR code, report it to campus police.

What to Do If You Fall Victim

If you suspect you’ve scanned a malicious QR code:

  1. Change Your Passwords: Update passwords for any accounts that might be compromised.
  2. Protect Your Duo Codes: Never share your Duo codes with anyone. If you receive unwanted Duo Verified Push notices, don’t ignore them. Reporting them as fraudulent when prompted by your Duo Mobile app.

Remember, a little caution goes a long way in keeping you safe online.

Stay informed, stay secure.