Recent years have seen the widespread adoption of QR codes, offering convenient functionality but also posing security risks. These scannable codes are omnipresent, enabling users of Android and iPhone devices to access various services swiftly by scanning the codes. Despite their time-saving benefits, QR codes have a dark side, with cybercriminals using fake versions to target millions of individuals.

While QR code attacks are not new, they are becoming more prevalent and sophisticated.

A concerning scam that has emerged is known as “brushing,” where criminals ship unsolicited packages containing fake QR codes to recipients. These packages arrive without sender information to pique curiosity, prompting individuals to scan the code for sender details or return instructions, unknowingly exposing themselves to potential fraud.

Victims falling for such scams risk divulging sensitive personal data, which cybercriminals can exploit for financial gain and further fraudulent activities.

According to cybersecurity firm NordVPN, the issue of fake QR codes is escalating, with an estimated 26 million people possibly redirected to malicious websites unknowingly through these codes.

Marijus Briedis, NordVPN’s chief technology officer, highlighted the deceptive nature of QR codes, stating, “QR codes have become a stealthy entry point for cybercriminals. Unlike typical phishing emails, physical QR codes often instill trust, making users more susceptible to potential threats.”

To stay safe from QR code scams, consider the following tips:

• Verify the source before scanning a QR code. If unsure of its origin, avoid scanning and contact the sender using official contact details.
• Utilize the feature on smartphones that displays a website link before opening it. If the link appears suspicious, refrain from proceeding.
• Keep your phone’s security software up to date and use a VPN for secure browsing to mitigate risks associated with harmful websites.
• Share safety tips with friends and family, especially those less familiar with technology, to prevent falling victim to scams.

In conclusion, while QR codes offer convenience, exercising caution before scanning and sharing personal information is crucial to safeguard against potential risks.

The QR code, originally developed as the Quick Response code in 1994 by Masahiro Hara and Denso Wave in Japan, has evolved into a versatile tool used in various sectors, including marketing, payments, and authentication. Its popularity surged globally in the 2010s and experienced a significant boost during the COVID-19 pandemic for touchless applications.

At Reach and across our entities we and our partners use information collected through cookies and other identifiers from your device to improve experience on our site, analyse how it is used and to show personalised advertising. You can opt out of the sale or sharing of your data, at any time clicking the “Do Not Sell or Share my Data” button at the bottom of the webpage. Please note that your preferences are browser specific. Use of our website and any of our services represents your acceptance of the use of