QR Code Security: How to Protect Yourself from Malicious Scans

The Rise of "Quishing"

As QR codes have become ubiquitous, scammers have developed a new tactic known as "Quishing" (QR Phishing). Because a QR code masks the destination URL from the human eye, attackers can trick users into scanning a code that leads to a fraudulent website designed to steal login credentials or install malware.

How to Scan Safely

Most modern smartphones will display a preview of the destination URL before actually opening the browser. Always read this URL carefully. If the QR code is supposed to take you to your bank, but the URL preview says something like "secure-login-update.com", do not proceed.

Beware of Physical Tampering

A common scam involves printing a malicious QR code on a sticker and placing it over a legitimate QR code (for example, on a parking meter). Before scanning a public code involving payments, run your finger over it to ensure it is not a sticker placed over the original.

Securing Your Own Codes

If you generate QR codes for your business using MakeFreeQR, consider embedding your company logo in the center of the code. While a scammer could still replicate the logo on a fraudulent sticker, the extra layer of branding makes it slightly harder for amateur scammers to spoof your materials convincingly.