QR codes have become a common, convenient way to access links quickly or manage cash transfers, but they also offer cybercriminals another method of delivering attacks.
QR codes could be a trap
Because you don’t know where a QR code will take you before you scan it, it’s easy for criminals to create QR codes that take you to unsafe links or download dangerous apps. Cybercriminals may:
- Pose as someone else online, posting malicious QR codes on social media
- Leave enticing signs, stickers or posters with malicious QR codes in public areas
- Replace or cover up legitimate QR codes with malicious ones
How to scan safely
- Check for tampering before scanning a QR code. If it looks like someone put a sticker over another sticker, or if something seems out of place, don’t scan it. If you’re in a place of business, like a restaurant, check with an employee to ensure a code hasn’t been tampered with.
- Never scan QR codes from unknown or untrusted sources you encounter in person or online.
- Make sure your QR code scanner lets you preview a QR code’s link before taking you there. Take a close look at the link before you click it, to check for misspellings or added characters.
- If your device doesn’t let you preview the link address of the web page you will visit, you may want to talk to your cellphone provider to determine how to turn on this preview function to avoid visiting malicious web sites.
- Avoid entering sensitive information on a site you reached through a QR code unless you’re certain it’s legitimate.
- When in doubt, don’t click.
Thanks for following along this Cybersecurity Month and helping to keep our health system and our patients safe!
