Fraudulent "tricks" via QR codes

However, this convenience also comes with many risks, especially the risk of encountering fake QR codes. Bad guys have used fake QR codes, containing malicious links to steal personal information, bank accounts and property. This is one of the increasingly sophisticated "tricks" of cybercriminals.

They can be used to steal personal information, bank accounts, and even install malware on users' devices. With just one careless scan, anyone can become a victim of these scams. From coffee shops, gas stations, to bank messages, any unknown QR code can be a "gateway" for criminals to steal information, money, and privacy.

In fact, there have been cases of people being scammed of large sums of money by scanning QR codes. Ms. Thu Trang, residing in Cua Nam ward (Hanoi) said: "When paying the owner of a fashion shop, I scanned the QR code to pay. The money was deducted, but the shop owner's account did not receive the money. It turned out that the QR code had been overwritten by a bad guy."

Nguyen Minh Huy, a student at the University of Transport, said: “I once lost my ShopeePay account because when I scanned the QR code to receive a food voucher, I was taken to the Shopee login page. I typed in without knowing it was a fake page. My account was taken over, my accumulated points and card information were all exposed.”

According to experts in the field of information technology, one of the scams related to QR codes is that fake QR codes are often posted in public places. Fraudsters try to print their QR codes and post them over real QR codes at coffee shops, checkout counters, gas stations, bus stations, etc. Users think they are transferring money to the store, but in fact they are transferring money to the scammer.

Or QR codes via fake messages or emails. Accordingly, messages impersonating banks, authorities, e-wallets, etc. send QR codes requesting "account verification" or "information update". Once users scan and log in, their information will be stolen.

In addition, there is another trick, where bad guys print QR codes on advertising products, gifts, surveys, fake lottery tickets... then lure users to scan, thereby installing spyware or redirecting to pages containing malicious code.

To proactively prevent fraud through QR codes, the police agency recommends that people need to be more vigilant when making online transactions. Absolutely do not scan QR codes from unknown sources, especially codes sent via text messages, social networks, emails or posted in public places. When scanning QR codes, carefully observe the displayed link and verify the name of the beneficiary organization or individual before operating.

People should only install applications from official stores such as the App Store or Google Play, not download applications via links received after scanning QR codes, and absolutely not provide OTP codes, passwords, or bank account information to anyone.

To limit risks, businesses and locations also need to pay attention to equipping applications that can check payment transfers quickly and check right on the app; use applications that notify transactions with sound when transferring money via QR code to the destination account, helping to reduce transaction checking time for both buyers and sellers.
At the same time, agencies, organizations and businesses need to strengthen inspection and management of QR codes issued by the units and regularly educate officers and employees on skills to recognize and handle suspicious situations, contributing to the prevention of high-tech crimes.

Quang Minh

Source: https://nhandan.vn/cac-chieu-tro-lua-dao-qua-ma-qr-post926223.html