How scammers are using QR codes to steal personal information
With contactless interactions becoming the norm after the pandemic, Quick-Response codes, or QR codes, have become the popular way places connect people to their websites, menus, apps and other information via a quick scan of the image. This seamless connection opens the door for cyber criminals to direct users to malicious sites, links and more.
What does a QR Code look like?
Recently, the FBI has issued warnings about ‘Quishing’ (QR code phishing) as cyber-criminals are using fraudulent QR codes to steal people’s personal information and compromise company sensitive data. As fast, easy and convenient as QR codes are to scan, it is also that easy for cyber-criminals to ‘reel’ you into scanning a fraudulent QR code which puts you, other colleagues and the company on the ‘line’.
How to avoid getting Quished:
- Always verify with the sender or company before scanning a QR code.
- Look for the tell-tale signs of a con – like a QR code surrounded by misspellings and poor grammar
- Avoid being rushed or pushed into scanning a QR code unless you know for certain it’s the real deal.
- Make sure you haven’t been directed to a spoofed website or suspicious mobile app.
- Look for misspelled URLs, the lock symbol and ‘HTTPS’ in the upper left of the URL, spelling or grammar errors and the design quality.
- Be suspicious of requests for payment or financial information – whether the request is delivered via QR code or some other route.
Pro Tip: Beware that fraudulent QR codes will automatically open a new browser! If the QR code is legit, a link will pop up that shows you the website address before opening a new browser.
As a member of the Carnival Corporation family, we’re counting on you to help us stay cybersecure. Remember, if a QR code seems fishy, report the email using the ‘Submit a Phish’ button in your Outlook toolbar.
Visit our trusted cybersecurity partner, Terranova, for more tips on reporting email scams at https://terranovasecurity.com/what-you-need-to-know-about-reporting-an-email-scam/ *
*This link takes you to a third-party website. This is an approved, safe link to Terranova, the vendor helping us with this program.