Watch out for cryptocurrency QR code generators, they're almost all fake!

[fcode]

Why is no one talking about all the malicious QRcode generators? They come up as top results in major search engines. Most are scams. WTF

[Anonylz]

I think that is something the search engine should look into, if there are fake among good ones coming up at the top of a search then the search engine must be aware of this and do something (if they can) to prevent people from falling victim of this fake qr code.

[OmegaStarScream]

Why would anyone need to use such a thing in the first place though? Exchanges, wallets, and block explorers already provide that, you don't need to use a third-party service for that.

[davis196]

Can you elaborate more on this?Why would anybody search in Google or Bing for a QR code generator?
This doesn't make any sense.
I usually don't use QR codes,unless I'm required by some third party service,but I would never use a QR code to send or receive BTC or any altcoin.Wallet addresses are way better than QR codes,but you have to be careful when copy pasting the address characters.
I did a google search about this topic.Do you suggest that the websites bitcoinqrcodemaker.com,qr-code-generator.com and gobitcoin.io are scams?Maybe you are right.

[Bitcoin_Arena]

Why is no one talking about all the malicious QRcode generators?

Why are you searching them up in the first place? You don't need them at all.

Most wallets and exchange apps have an inbuilt feature where you can generate QR codes for addresses and also scan them, so I don't understand why you look for some random QR code generator or scanner off google.

[livingfree]

Why is no one talking about all the malicious QRcode generators? They come up as top results in major search engines. Most are scams. WTF

What's with that?

Like you're going to scan it and you'll get free money from them?

Care to explain more about it? Most of the scams really are in search engines' first results, there's a note that they've been placed as ads and that's for the intention of targeting people that are specifically searching for that thing.

I don't understand why there's a QR code generator and what's purpose of it. Usually, we're transacting more with the addresses and copy-pasting it from here to another.

[vv181]

Why is no one talking about all the malicious QRcode generators? They come up as top results in major search engines. Most are scams. WTF

What's with that?

Like you're going to scan it and you'll get free money from them?

Care to explain more about it? Most of the scams really are in search engines' first results, there's a note that they've been placed as ads and that's for the intention of targeting people that are specifically searching for that thing.

I don't understand why there's a QR code generator and what's purpose of it. Usually, we're transacting more with the addresses and copy-pasting it from here to another.

QR code generator site mainly convert your text/URL/address or anything into a QR code. It comes in handy for some purpose like plainly showing a bitcoin donation address, so some people can just scan the QR code instead of typing it one by one. Or like making use of it for cold storage purposes.

While knowing the QR code being used for those purposes, some hacker is making a malicious generator site that can alter the bitcoin/altcoin address, thus making the generated QR code are infected.

[dkbit98]

Why is no one talking about all the malicious QRcode generators? They come up as top results in major search engines. Most are scams. WTF

We are talking about QR generators, you just don't knw where to look, and they are not all scam and malware at all.
I was personally comparing QR codes with NFC in one of my topics, and I know few open source software working just fine for reading and generating QR codes, but you can also use Electrum wallet for generating BTC addresses.
QR Workshop or Zint can be used for windows, and CoBang for Linux operating system, they are all open source software.

[Luqman]

Be careful when you are going to download or use applications from google play or another third party. Because there are so many fake applications that you may find. Not only the QR generator but also some other applications such as fake TrustWallet and others.
It is better to use a QR code from the platform itself if there is any.
Or, if you really need it, why don't you get them from the official one?
Btw, although we are using such a QR scanner, it is better for us to double check the wallets or data that we want to use or submit.This is to avoid the fake information

[livingfree]

Why is no one talking about all the malicious QRcode generators? They come up as top results in major search engines. Most are scams. WTF

What's with that?

Like you're going to scan it and you'll get free money from them?

Care to explain more about it? Most of the scams really are in search engines' first results, there's a note that they've been placed as ads and that's for the intention of targeting people that are specifically searching for that thing.

I don't understand why there's a QR code generator and what's purpose of it. Usually, we're transacting more with the addresses and copy-pasting it from here to another.

QR code generator site mainly convert your text/URL/address or anything into a QR code. It comes in handy for some purpose like plainly showing a bitcoin donation address, so some people can just scan the QR code instead of typing it one by one. Or like making use of it for cold storage purposes.

While knowing the QR code being used for those purposes, some hacker is making a malicious generator site that can alter the bitcoin/altcoin address, thus making the generated QR code are infected.

Thanks.

I understand it now but does that make sense if you get those qr codes from unknown websites that you don't really website?

I think that it all goes now to us, individuals. If there's no need to visit a website such as this qr generator, it's better to be safe and don't visit them at all.

[GreatArkansas]

Can you elaborate more on this?Why would anybody search in Google or Bing for a QR code generator?
(....)

Some people are using QR codes to generate receiving address to their wallet because QR code these days is the best way to use other than copying/pasting/typing all of your Bitcoin address, QR code also will help that your address is accurate.

That's why there is a lot of Bitcoin wallet these days that already have QR code for receiving address so people can use them to receive Bitcoin without giving their Bitcoin address, just scan and send.

So, in this case, some people could use Google and search "QR GENERATOR" then if they will paste their Bitcoin address, then that QR GENERATE site could change the output of QR, they could change with them so that's how it became fake.

[Jawhead999]

Why is no one talking about all the malicious QRcode generators?

What does with those below thread then? You said you've use search engine, but you can't use search engine to find old discussion about QR code scam, how shame it is.

1. {Warning}: Fake Bitcoin QR Code Generators
2. [Warning] Bitcoin QR code maker
3. QR Code replacement scam
4. [Alert! Alert] Bitcoin QR Generator” lead to scam websites.

Due to my skepticism I never use any QR code when it comes to exchanges or wallet, it's better to copy-paste the address and triple check it.

[yazher]

Why would anyone need to use such a thing in the first place though? Exchanges, wallets, and block explorers already provide that, you don't need to use a third-party service for that.

This is legit because I almost posted a tutorial regarding QR code generators but turned out to be generating other wallet addresses rather than the wallet I put in the box. But when I saw that exchanges already provide such service, I forgot to warn everyone since my goal is to provide them convenience regarding their wallet QR code.

Maybe they don't know or didn't see that they can create QR codes in their exchanges, that's why they used such malicious service that turned out to be scam.

[The Cryptovator]

I am not getting why we need to generate QR codes for cryptocurrency? I never use that nor do I need to use it. Because almost all wallets and exchanges are giving facilities of QR code. So no meaning search it on Google and generate a new one from there. On the other hand, popping up on Google search doesn't prove the legitimacy of a program or software. So don't use Google search for every and each need.

[Wexnident]

Well, you don't exactly need to use them? Pretty sure wallet addresses are enough and heck, much safer to use than generating a qr code. Plus, it has a much bigger guarantee in actually checking if it's correct since i don't think there's a way to see if the QR code indeed leads to that specific wallet. Plus, isn't it a hassle to even open up one to generate the code instead of just, well, sending the wallet address? That's pretty straightforward. And afaik, most centralized exchanges have their own QR codes generated by the site themselves, so no worries there, but if it was other than that, then yea, might be better to just use the wallet address itself.

[FatFork]

Why is no one talking about all the malicious QRcode generators? They come up as top results in major search engines. Most are scams. WTF

I don't have detailed research on the subject, but I doubt most online QR code generators are scams as you claim. Can you give some examples?
Besides, isn't that something that can easily be verified? After generating the QR code, scan it yourself and see where it takes you.

If you find something malicious, you can even open a scam accusation on this forum to warn other members about that site.

[SFR10]

Why is no one talking about all the malicious QRcode generators? They come up as top results in major search engines. Most are scams. WTF

This question would've made more sense a decade ago when only a select group of wallets were generating it, but nowadays, almost all of the wallets already provide it ^{[apart from other sources (e.g. explorers and etc...)]}.

• It's worth noting that one of the QR code warnings that @Jawhead999 posted, has been reported twice ^{[2018 and 2021]}, but for some reason, their registrar has not done anything yet ^{[you should blame them instead]}.

[taufik123]

if it is considered risky, it is better to avoid similar QR Code Generator applications. Moreover, QR codes have been provided by many exchanges for wallet addresses or wallet applications such as Trustwallet, ImToken, Safepal already provide QR codes without having to create them again.
Don't take risks, take advantage of what's already there and that's enough. If you don't want to use a QR code, just copy and paste the address and check periodically to see if it's correct.

[e_abrams]

I confess I did not even know they existed. I guess I was naive. Thank you for the heads up though, I will certainly be on the lookout now!

[OgNasty]

Why is no one talking about all the malicious QRcode generators? They come up as top results in major search engines. Most are scams. WTF

I think common sense is probably the reason for this.  Don't let anyone have your private keys or use public keys that are generated for you by a third party.  This should be a no brainer.  You can generate your own QR code using your public key yourself, or I'm sure there are generators out there that provide you with a QR code for payment without needing to be the ones to have access to the private key.

For example, blockchain.com provides you with a QR code for any address automatically just by looking up the address.  There is no compromise of your security to use such a QR code for payments.  You can also easily check to make sure the QR code is for your address by just scanning it.

https://www.blockchain.com/btc/address/168WXhArv7Fasqvi2xm5MQMfLhG18jifMe

In short, it should be common sense to anyone not to get your Bitcoin keys from someone else (some exceptions like physical Bitcoin wallets, but you shouldn't load them either) and I think that's why people are out warning people not to use malicious QR code generators.  Additionally, people shouldn't have their Bitcoin private keys posted publicly, but I don't think we need to have a public discussion about that either.