In recent years, QR codes have gained immense popularity and are now being used for various purposes, ranging from accessing websites to making payments. However, this convenience and increased usage have also made them susceptible to cyber criminals. These fraudsters have become increasingly sophisticated in their methods of exploiting QR codes in order to deceive people and gain financial benefits.
For instance, in 2021, there was a notable case involving Harshita Kejriwal, the daughter of Delhi Chief Minister Arvind Kejriwal. She fell victim to a QR code scam while selling a sofa on an e-commerce platform. A potential buyer contacted her, agreed on a price, and sent a QR code for payment. Unfortunately, upon scanning the code, Rs 34,000 was stolen from her account.
Another case involved a professor at the Indian Institute of Science, Bengaluru, who was selling a washing machine online. He received a message from a potential buyer who agreed to the price without any negotiation. During the payment process, the buyer requested the professor to scan a QR code, promising immediate payment. However, as soon as the code was scanned, Rs 63,000 went missing from his account.
Even a member of the India Today Tech team experienced a similar incident while transacting on OLX. Despite the potential buyer agreeing to the listed price and showing interest in the item, suspicious signs arose when they hastily asked for UPI ID and bank account details for payment without inspecting or negotiating the item. The situation worsened when the buyer sent a questionable QR code via WhatsApp and put pressure on our team member for a quick resolution through continuous calls and messages. Fortunately, our team member recognized the scam and avoided falling victim to the fraudulent scheme.
Fake QR codes and payment scams are becoming increasingly common, especially on online marketplaces like OLX or Quikr. Scammers often pretend to be interested buyers and request the seller’s UPI ID or bank account details. They then send a QR code, claiming that it is necessary to confirm the transaction. However, what victims don’t realize is that this QR code leads them to a fake website that looks like their bank’s login page. Once they enter their login credentials, the scammer gains access to their bank accounts and steals their sensitive information.
Another tactic scammers use is redirecting victims to malicious websites through QR codes. These websites may contain malware that can compromise the user’s device and steal personal information or install unwanted software.
In some cases, scammers send emails claiming that the recipient’s debit/credit card or bank account is about to expire. They urge the recipient to scan a QR code to renew it. However, the attached QR code actually contains malware, and once clicked, the victim is redirected to a website where their sensitive data is stolen.
Steps To Protect Yourself:-
To protect yourself from QR code scams, it is important to follow some safety measures. Firstly, never share your UPI ID, bank account details, or OTP with strangers. Remember that QR codes are primarily used for sending money, not receiving it. Always verify the recipient’s name, account number, and IFSC code before scanning any QR code to receive money. Avoid scanning suspicious-looking QR codes, especially those that appear to be tampered with, such as stickers pasted over existing codes. It is recommended to use a QR code scanner app that allows you to preview the URL before visiting it. Nowadays, most camera apps on Android and iPhone provide this feature. Additionally, make sure to verify the identity of the seller before making any transactions on online platforms. Lastly, avoid sharing your mobile number unless absolutely necessary.
By following these safety steps, you can minimize the risk of falling victim to QR code scams and protect your personal information. Stay vigilant and cautious when dealing with QR codes and online transactions.