Bitcoin QR Security Warning

[audaciousbeing]

Why search google for bitcoin QR generator when most bitcoin wallets (if not all) shows the QR code of your bitcoin wallet.

Exactly the point. People sometimes willingly enter into a problem. Majority of wallets whether online of desktop version have their own QR generator where you can scan and make your payment and as a second check, you the expected address is displayed for anyone to do verification that the scanned address is the intended address. If the hackers are able to penetrate a site QR generator then the vulnerability is from the site admin and they should be held liable for such.

The point is as much as there are ways scammers are doing it we also need to be smart and be more careful on the internet. Moreso there are no perfect way. Those who have lost money knows how much the impact has made on their financial status but ultimately crypto needs to grow to the point where these set of people can be brought to book and face the consequences of their actions.

[Kakmakr]

The developers should definitely consider developing some OpenSource QR scanner that can be used to scan or create QR codes for Bitcoin purposes.

There are multiple QR scanner available. You don't necessarily need one especially for BTC.
Simply scan the QR with any scanner and copy/paste the address into your wallet.

On a mobile, most wallets already support scanning QR codes. You just need to verify the address and amount and can send your funds with one click.

I don't really see the necessity for a bitcoin-related QR scanner. Either a mobile wallet or any other standard scanner is good enough IMO. There wouldn't be any advantages.

Well, if those QR scanners are proprietary code, then you would not know if anything nasty is hidden in the code. This is why I would want to see some Open Source code that can be validated and signed by a reputable Bitcoin developer, so that we know that it is exploit free.

We have some very talented people, who created things like https://www.bitaddress.org/ that can surely help us to create a QR scanner just for Bitcoin users. 

I do not trust the other proprietary software that are out there. 

[bob123]

Well, if those QR scanners are proprietary code, then you would not know if anything nasty is hidden in the code. This is why I would want to see some Open Source code that can be validated and signed by a reputable Bitcoin developer, so that we know that it is exploit free.

We have some very talented people, who created things like https://www.bitaddress.org/ that can surely help us to create a QR scanner just for Bitcoin users. 

I do not trust the other proprietary software that are out there. 

There are open source QR scanner available on github.

I don't really see the necessity for a QR scanner to be signed by a bitcoin developer. Why give them more workload if everything you need is already available ?
And additionally, no software is free of exploits. You just can't know whether there is some hidden vulnerability.

Even with proprietary software, i think it is not too hard to check the first and last few chars of an address and the amount before sending the transaction.
Any QR reader can have a bug. IMO scanning for convenience, but checking for safety should be the way to go.

[lightningmelo]

If at all possible, never use anything that prevents you from validating that the address hasn't been compromised.

If you can't avoid it, use a well-tested, community reviewed QR code generator, and double check with some trusted app. Your iPhone has a built-in QR code reader in the Camera app that you can trust.

[virasisog]

I hadn't really heard much about this but apparently four out of five results returned when asking Google for a 'bitcoin qr generator' lead to scam websites. The sites then generated a QR code that encodes an address controlled by the scammers instead of the one necessary for the user.
Apparently instead of scammers making their own fake QR codes they have a blockchain explorer API to generate the QR for their address.

This scam falls into the reported $4 billion of digital currency stolen in Ciphertrace AML report.

https://www.forbes.com/sites/billybambrough/2019/09/12/researchers-have-issued-a-serious-bitcoin-qr-code-warning/#3ef6ff256d12

I think this is a very ignorant and a biased article from Forbes. Bitcoin adoption is not failing.
The popularity of cryptocurrency has boosted apparently,
however we cannot disregard this fact that scam schemes is taking advantage of this as well.

[kryptqnick]

I hadn't really heard much about this but apparently four out of five results returned when asking Google for a 'bitcoin qr generator' lead to scam websites. The sites then generated a QR code that encodes an address controlled by the scammers instead of the one necessary for the user.
Apparently instead of scammers making their own fake QR codes they have a blockchain explorer API to generate the QR for their address.

This scam falls into the reported $4 billion of digital currency stolen in Ciphertrace AML report.

https://www.forbes.com/sites/billybambrough/2019/09/12/researchers-have-issued-a-serious-bitcoin-qr-code-warning/#3ef6ff256d12

Wow, I've never heard of it either, thank you for spreading the warning! I don't use QR code generators, and honestly, I usually type in the Bitcoin address instead of scanning a code, but there are many people that really use QR codes. 4 out of 5 is a terrible number, and this is the case we need cyberpolice for. Such crimes should not be left unpunished, scamming websites should not dominate the area. Or, another option, we need at least one trusted QR code generator for everyone to use and not worry about such things... I do agree with virasisog, though, that it does not mean Bitcoin is disappointing.

[jdarren]

The last time I used a QR code was in association with my wallet. I went to this event where you could only purchase drinks from the bar paying with crypto in which the bartender scanned to redeem the money.

[hatshepsut93]

Is bitcoin gained this way really stolen? I would call it given away by idiots. When somebody takes something away from you it's theft but when you don't pay attention and lose it it's as much your fault as that scammer's. There were even bitcoin generators that were supposed to hack the blockchain to steal some coins off other people's transactions. If you fall for this you're a loser.

Why would you need a qr code generator? Even exchanges generate codes for your addresses for free.

If we applied this thinking to everything in our life, our whole society would crumble, because scammers would be everywhere. Everyone starts as a beginner, you can't really expect people to know everything, so what's the point of blaming the victim? Everyone makes mistakes, but scammers are shitty people because they take advantage of people's mistakes, and they are especially bad for Bitcoin because of its irreversible transactions, and a lot of Bitcoin's bad rep comes from abundance of scammers in its economy.

[MetalGear]

I hadn't really heard much about this but apparently four out of five results returned when asking Google for a 'bitcoin qr generator' lead to scam websites. The sites then generated a QR code that encodes an address controlled by the scammers instead of the one necessary for the user.
Apparently instead of scammers making their own fake QR codes they have a blockchain explorer API to generate the QR for their address.

This scam falls into the reported $4 billion of digital currency stolen in Ciphertrace AML report.

https://www.forbes.com/sites/billybambrough/2019/09/12/researchers-have-issued-a-serious-bitcoin-qr-code-warning/#3ef6ff256d12

It is inevitable to have scammers in every technology that's why bitcoin could also have the risk of being attacked by it. Newbies are mostly the victim because of being naive about how crypto space works and what threats are in it. Now attackers are on it, using QR codes to manipulate and have everything in their hands, we can't stop them from doing so, but we can watch out and be careful in every move we are about to do inside the crypto space. Making sure that we are using a reliable and trusted QR generator could avoid you from losing something irreversible.

[ReiMomo]

I hadn't really heard much about this but apparently four out of five results returned when asking Google for a 'bitcoin qr generator' lead to scam websites. The sites then generated a QR code that encodes an address controlled by the scammers instead of the one necessary for the user.
Apparently instead of scammers making their own fake QR codes they have a blockchain explorer API to generate the QR for their address.

This scam falls into the reported $4 billion of digital currency stolen in Ciphertrace AML report.

https://www.forbes.com/sites/billybambrough/2019/09/12/researchers-have-issued-a-serious-bitcoin-qr-code-warning/#3ef6ff256d12

It is inevitable to have scammers in every technology that's why bitcoin could also have the risk of being attacked by it. Newbies are mostly the victim because of being naive about how crypto space works and what threats are in it. Now attackers are on it, using QR codes to manipulate and have everything in their hands, we can't stop them from doing so, but we can watch out and be careful in every move we are about to do inside the crypto space. Making sure that we are using a reliable and trusted QR generator could avoid you from losing something irreversible.

The best thing to do is always doubled check and compare the QR code address given above(it should above the QR code the address given).
Time to time scammers are getting smarter, they always find ways to get fall in trap those newbies victim. As a cryptocurrency user just always be careful in having a transaction. Verifying first in the manual before you click button confirm. Anyway if you know how to protect your mobile phone from possible malware infection in reading QR code, you must read this. https://www.lifewire.com/how-to-protect-yourself-from-malicious-qr-codes-2487772

[Zionatin]

Is bitcoin gained this way really stolen? I would call it given away by idiots. When somebody takes something away from you it's theft but when you don't pay attention and lose it it's as much your fault as that scammer's. There were even bitcoin generators that were supposed to hack the blockchain to steal some coins off other people's transactions. If you fall for this you're a loser.

Why would you need a qr code generator? Even exchanges generate codes for your addresses for free.

If we applied this thinking to everything in our life, our whole society would crumble, because scammers would be everywhere. Everyone starts as a beginner, you can't really expect people to know everything, so what's the point of blaming the victim? Everyone makes mistakes, but scammers are shitty people because they take advantage of people's mistakes, and they are especially bad for Bitcoin because of its irreversible transactions, and a lot of Bitcoin's bad rep comes from abundance of scammers in its economy.

I don't think he understands. When you scan a QR code to pay the scammers address replaces the address in the QR code. This is the same as the copy-paste one where your clipboard is replaced with their address instead of the one you tried to copy. Not all places have the address with the QR code. As long as you using a legit wallet with QR scanner everything is fine.

I do think sometimes people do sort of ask for it when they fall for really silly scams when they should know better but greed takes over and the scammer knows this so they charm you with offers to increase your greed to the point you don't think as you should and they exploit that.

[Kyraishi]

What's the reasoning behind someone sending their money to one of the random QR codes? Does the person think it's a wallet or a legitimate transaction? The only way I see this working is if someone scanned an address and then the APP just generated their own address and people got to lead to believe that it turned the address into a QR code.

Some people are really clueless, why don't they just use an address? Much safer, and easier, I personally have never used QR codes before, addresses are the way to go.