Beware of QUISHING

[cryptoaddictchie]

Wow thats a very long response to a lot of users. But I did appreciate your answer. I get it thats not gonna be easy to scam too as the hacker might need couple of of things needrd beforr succesfully infilitrated the account of yours. However does this kind of QR, also present from some apps that are usable for example a camera effect app? Or something that normal user do and exploited by a hacker for getting some info such as private key?

[_act_]

However does this kind of QR, also present from some apps that are usable for example a camera effect app? Or something that normal user do and exploited by a hacker for getting some info such as private key?

What I read about QR code scam is done when the scammer change the QR code to his own. This is common to those physical QR codes and not the digital ones. But if someone download a fake wallet, definitely the QR code belong to scammers. But as for a legit QR code to be changed to hackers code, it is not easy. Even QR code is safer than just copy and paste of addresses.

[adultcrypto]

This is a major threat that people can easily fall for because it is not easy to notice a malicious website or app from the QR code unless it is scan and by then it would have already been too late. Unfortunately, there is a boom in QR code now, even in leisure centers and train stations, they are there which makes it a very challenging situation.  One way to avoid this is to only scan QR codes from trusted sources and completely avoiding random ones. There should be other ways of protecting oneself from this kind of security threat which I'm willing to learn from others.

[CryptSafe]

This is another sophisticated techniques scammers use to steal from their victims. Many people would easily fall into this because there is no way to verify through the QR code if what they are scanning is legit or fake as it directs them to the website or whatever they are in search of without any warning or sign for them to stop. I really do not scan QR codes from random sites except on recommendations from a reputable member or person who can vouch for such services to be real, legit and genuine before I scan any QR code. To be honest I barely use it for payment or purchase of anything except from the Crypto exchange directly which I am very much sure of or I got a direction from the staff of such organisation using the QR code for their services then I can conveniently use it otherwise I do not make the mistake of using it for some random website.

People who barely use it are pretty much safe and those who are just typing the words or links that they often visit. But the trend might go there that people will use QRs from time to time because it's quicker and more convenient for most and these cons are going to take advantage of it.

Obviously, these cons would definitely take advantage of the whole thing as it is that the QR code scanner is now becoming very rampant and people are beginning to use it very much as a result of its ease and speed to connect with the payment gateway. People just like things of this nature that  does not stress them that much and mostly they do not really verify anything they just quickly use them because they hear it is a hot cake without taking time to see for themselves reviews about it.

[tabas]

However does this kind of QR, also present from some apps that are usable for example a camera effect app? Or something that normal user do and exploited by a hacker for getting some info such as private key?

Whenever we download an app and we agree to the terms that they have like the usage of our information and data, it's possible that the app itself might be able to use our camera or hear our voices. This is what google and facebook do to our devices. But as for getting direct usage for our camera just to scan their QRs and have some camera effect, I don't think that it's possible. And for a user to be forced or get exploited by a hacker to penetrate into our apps and devices to get important details like private keys or any files, they have to make us download their malware first or connect to their fake wifi connection.

This is a major threat that people can easily fall for because it is not easy to notice a malicious website or app from the QR code unless it is scan and by then it would have already been too late. Unfortunately, there is a boom in QR code now, even in leisure centers and train stations, they are there which makes it a very challenging situation.  One way to avoid this is to only scan QR codes from trusted sources and completely avoiding random ones. There should be other ways of protecting oneself from this kind of security threat which I'm willing to learn from others.

That's why everyone needs to be watchful with what they scan. Like those flyers and ads that says "scan for more info" they might be legit but who knows if some cons takes a swap of those ads with their ill intent to the victims.

Obviously, these cons would definitely take advantage of the whole thing as it is that the QR code scanner is now becoming very rampant and people are beginning to use it very much as a result of its ease and speed to connect with the payment gateway. People just like things of this nature that  does not stress them that much and mostly they do not really verify anything they just quickly use them because they hear it is a hot cake without taking time to see for themselves reviews about it.

And that is the reason why we need to be safe with our practices and don't be like those people that easily scan things that they see.

[Darker45]

This is the first time I heard of Quishing. So, here's another newborn word.

I don't know if this is available to all phones, but when I open my camera on a QR code, it indicates where it leads me. I've used this a handful of times to verify QR codes. But aside from this, is there a standard way to know what the QR is all about? We aren't necessarily asked to confirm that we're about to enter this and that site, for example, each time we scan QR's, right?

I'm not really a big fan of QR. Even in paying or depositing, I prefer the old manual version of making inputs. Perhaps I'm just used to the old and somehow inconvenient way of doing things, but it seems more secure. You're allowed to doublecheck and verify.

[notocactus]

This is the first time I heard of Quishing. So, here's another newborn word.

This is a new term with me too.

What is quishing?
According to Wikipedia, it is a relatively new trend in online scam.
It is a new trend in 2023 and 2024 according to this report,l and others from [34-38] references cited by Wikipedia.

[Yucky]

As we enter the new year, we need to be cautious of these new scams. I know one way I can QR codes is when it's gateway to join a  group chat for investment opportunities or something I like. It's easy to get carried away by the promise of quick gains or the latest crypto coin trends.

However, we must be careful not to innocently join harmful groups. Even if a friend shares something that seems harmless but require scanning with the knowledge of quishing, I'm going to double-check the authenticity of the QR code and the person who sent it. Anyone can be a victim of scams, and it's better to be safe than sorry.

Let's be watchful of the group chats we join through scanning QR codes we scan. A little caution can go a long way in protecting ourselves from these latest scans this year.

[pawanjain]

QR phishing, also known as ‘quishing’

That's a new word I learnt today. I was aware of phishing and I was aware of people manipulating QR codes but didn't know that a term exists for this.
In my country, I have read in news that some people were quishing such that they sticked their own QR codes on top of QR codes in public places, local shops etc...
Thus, there were earning in thousands every day and so people are adviced to double check whom they are paying to avoid such fraudlent transactions.
The same goes with everything and we should double check everything we scan from our phones.

[EluguHcman]

Seriously the Malwares threats in the internet has been too much and when we are being compromised of your Privacies and looses our digital valuables, we either don't know how in earth it happened, sometimes we think it could be the one person who we handed out device that is responsible for it while it is not. Could literally be that we are blindly responsible of it.

Let us appreciate the educational systems of todays that tends to highlight and exposes these varieties to how these malicious occurances could happen unknowingly to us and revealing how we can avoid them.

Actually this QR Scanning Code system is sometimes as a result of users just being lazy to personally go through the web link addresses by themselves probably because the alphabetical and numerical data of the file seems too lengthy to be inputted one after the other meanwhile the QR code help to log on faster.
This is as a case of being greedy and the eagerness to quick riches which leads to the hands of scammers.

The QR code actually works in a malware that when used the deceptive QR code, it compromises your device Privacies according to how vulnerable your device security features are.
There are certain protective security features that detects malicious domains which prevents the scammers project to intercept on your privacy.
If if your device security is vulnerable and you get on this stuff. Your data's would be liable to invade on and would automatically redirect your your operating system towards their malicious domains where they harvests your funds, collects data's or even redirect you to install their own corrupted apps and as much your device has the malicious app is how much they takes control of your device software.

It has been advisable to verify a source to the QR code before proceeding to use it and to be careful of access granting permission from our devices. This is relatively to when we uses the public WiFi, we also standout to stake our device privacies while scamming invasion remains the watchwords.

[tabas]

This is the first time I heard of Quishing. So, here's another newborn word.

I don't know if this is available to all phones, but when I open my camera on a QR code, it indicates where it leads me. I've used this a handful of times to verify QR codes. But aside from this, is there a standard way to know what the QR is all about? We aren't necessarily asked to confirm that we're about to enter this and that site, for example, each time we scan QR's, right?

I'm not really a big fan of QR. Even in paying or depositing, I prefer the old manual version of making inputs. Perhaps I'm just used to the old and somehow inconvenient way of doing things, but it seems more secure. You're allowed to doublecheck and verify.

Usually, it's about the website of the service or product that they're selling and the bad guys are taking advantage of the people who are not aware of this hack which can lead the unaware people into visiting the wrong website they've made which is most likely a phishing website. I see a disadvantage if the websites that have used QR codes used link shorteners, it's best not to proceed with those. And you being not a fan of it and unaware of it, seems that you're not using it so it is an advantage for you.

As we enter the new year, we need to be cautious of these new scams. I know one way I can QR codes is when it's gateway to join a  group chat for investment opportunities or something I like. It's easy to get carried away by the promise of quick gains or the latest crypto coin trends.

However, we must be careful not to innocently join harmful groups. Even if a friend shares something that seems harmless but require scanning with the knowledge of quishing, I'm going to double-check the authenticity of the QR code and the person who sent it. Anyone can be a victim of scams, and it's better to be safe than sorry.

Let's be watchful of the group chats we join through scanning QR codes we scan. A little caution can go a long way in protecting ourselves from these latest scans this year.

That's another thing, when you're active with these crypto groups and random guys are giving you QR codes for you to scan and get a visit of it, it's best to ignore them. Nobody wants the best for you in that type of group and will just hand out information for you to earn more or earn freely.

QR phishing, also known as ‘quishing’

That's a new word I learnt today. I was aware of phishing and I was aware of people manipulating QR codes but didn't know that a term exists for this.
In my country, I have read in news that some people were quishing such that they sticked their own QR codes on top of QR codes in public places, local shops etc...
Thus, there were earning in thousands every day and so people are adviced to double check whom they are paying to avoid such fraudlent transactions.
The same goes with everything and we should double check everything we scan from our phones.

Yeah, that's another way of these cons. They do a swap QR code if it's about payments and that's the danger for the customers and the shop owners. And that solely focus on payments redirected to the cons wallets or banks. Whilst this, they're doing something else that might suck the entirety of your files, information, wallets, money, etc. So yeah, be careful.

....It has been advisable to verify a source to the QR code before proceeding to use it and to be careful of access granting permission from our devices. This is relatively to when we uses the public WiFi, we also standout to stake our device privacies while scamming invasion remains the watchwords.

That's right, it's also the same when using public wifi and it's best not to use any of them and so as these random QR codes, so don't be a curious one that keeps on scanning them not knowing the contents of it.

[libert19]

Are there folks here who are a fan of scanning random QR codes? or even not random QRs. That's why I prefer not to scan most of it if it's related to finances and crypto matters.

On scanning QR codes, I scan plenty and they are all related to finance matters.

We have thing called UPI here in India — you scan qr code, it fills vendor details, you enter amount to pay (in case, it's not dynamic qr code) and make payment. It's really convenient so it has kinda become norm to make payments this way.

Do note that making payment still requires your confirmation, it's just filling details is easier this way.

[Hyphen(-)]

Are there folks here who are a fan of scanning random QR codes? or even not random QRs. That's why I prefer not to scan most of it if it's related to finances and crypto matters.

Yes, I used one recently while logging to my Binance exchange app on my browser, it was easier for me than to use any fake or clone website that will lead to scam and I was avoiding imputing my data manually for security reason; it was successful and I never expected such scam QR Code way.

I know if invalid QR Codes that are mostly used by some business people especially those once that franchise other people business without legal permission, and I also know that people can generate QR code on their own, but I never think scammers has adopted the way to keep injecting virus or keep scamming people every day in the internet.
Thank you for this update, I hope we will be vigilant and be careful of the codes we scan.

[Smartvirus]

Part of where the problem lies for this kind of phishing is that, it doesn’t necessarily have to be an attempt to do a Bitcoin or cryptocurrency transaction. QR codes serves a variety of purposes today and comes with some ease to work and payment I tell you that. You having to just scan the bar code and have all the necessary information to a services displayed for ease access and convenience is what everyone wants to get. Unfortunately, there are always bad actors who seek out ways to exploit what we enjoy for their criminal activities. One cannot be too careful in avoiding these scams but, having your expose these tricks creates in everyone a mental alertness to the issue.

[tabas]

Are there folks here who are a fan of scanning random QR codes? or even not random QRs. That's why I prefer not to scan most of it if it's related to finances and crypto matters.

On scanning QR codes, I scan plenty and they are all related to finance matters.

We have thing called UPI here in India — you scan qr code, it fills vendor details, you enter amount to pay (in case, it's not dynamic qr code) and make payment. It's really convenient so it has kinda become norm to make payments this way.

Do note that making payment still requires your confirmation, it's just filling details is easier this way.

It's good if there is a system like that in most countries. If there's a way to determine and check out the details first and see the whole thing about the scanned QR, that's amazing. But even if the system is like this and we get to see a glimpse of the details of the QR that we scan, those who take advantage of it will use the same information and fake details so that interested people will still proceed to the website/app.

Yes, I used one recently while logging to my Binance exchange app on my browser, it was easier for me than to use any fake or clone website that will lead to scam and I was avoiding imputing my data manually for security reason; it was successful and I never expected such scam QR Code way.

I know if invalid QR Codes that are mostly used by some business people especially those once that franchise other people business without legal permission, and I also know that people can generate QR code on their own, but I never think scammers has adopted the way to keep injecting virus or keep scamming people every day in the internet.
Thank you for this update, I hope we will be vigilant and be careful of the codes we scan.

Now that you know, everyone is free to use qr code generators or the actual accounts that they have will serve their own QRs and replace it if it's about the payments. But the other danger is about tricking people into scanning these qrs into fake websites or direct them to file sharing websites to download their malware.

Part of where the problem lies for this kind of phishing is that, it doesn’t necessarily have to be an attempt to do a Bitcoin or cryptocurrency transaction. QR codes serves a variety of purposes today and comes with some ease to work and payment I tell you that. You having to just scan the bar code and have all the necessary information to a services displayed for ease access and convenience is what everyone wants to get. Unfortunately, there are always bad actors who seek out ways to exploit what we enjoy for their criminal activities. One cannot be too careful in avoiding these scams but, having your expose these tricks creates in everyone a mental alertness to the issue.

Even if the details are there and displayed, many cons can play it out and just display fake details to give the victims confidence for them to proceed and the next thing that happens is what we know then.

[Majestic-milf]

 I keep saying this that it's not news that scammers are getting better in their deeds and if you check, they're using the originality and authenticity of QR codes to do their dirty work but for me, just like how it's not cool to tap on links that seems suspicious because there will always be something to give these scammers away, that's the same way one has to be careful when scanning random QR codes. I means with the wide ranges of scam everywhere, I think the thought of scanning a random code would send warning bells in my head.

[libert19]

Are there folks here who are a fan of scanning random QR codes? or even not random QRs. That's why I prefer not to scan most of it if it's related to finances and crypto matters.

On scanning QR codes, I scan plenty and they are all related to finance matters.

We have thing called UPI here in India — you scan qr code, it fills vendor details, you enter amount to pay (in case, it's not dynamic qr code) and make payment. It's really convenient so it has kinda become norm to make payments this way.

Do note that making payment still requires your confirmation, it's just filling details is easier this way.

It's good if there is a system like that in most countries. If there's a way to determine and check out the details first and see the whole thing about the scanned QR, that's amazing. But even if the system is like this and we get to see a glimpse of the details of the QR that we scan,

Leaving UPI alone, I scanned random QR using mobile's camera and it shown the details and you decide what to do with it instead of directly redirecting on website/app, I guess this is as good as it gets.

... those who take advantage of it will use the same information and fake details so that interested people will still proceed to the website/app.

I am not sure what you mean here, can you elaborate?

[tabas]

I keep saying this that it's not news that scammers are getting better in their deeds and if you check, they're using the originality and authenticity of QR codes to do their dirty work but for me, just like how it's not cool to tap on links that seems suspicious because there will always be something to give these scammers away, that's the same way one has to be careful when scanning random QR codes. I means with the wide ranges of scam everywhere, I think the thought of scanning a random code would send warning bells in my head.

And don't do that even if your curiosity is trying to hit your head doing it, never.

It's good if there is a system like that in most countries. If there's a way to determine and check out the details first and see the whole thing about the scanned QR, that's amazing. But even if the system is like this and we get to see a glimpse of the details of the QR that we scan,

Leaving UPI alone, I scanned random QR using mobile's camera and it shown the details and you decide what to do with it instead of directly redirecting on website/app, I guess this is as good as it gets.

Yeah, that's it. The decision is still on us but not all folks are like us and can spot something suspicious that is shown in the details. There goes those folks that hits to continue without assessing what's on the details but, we can't do anything with that and they're on their own if they still fall for those suspicious details even they're already appearing in front of them.

... those who take advantage of it will use the same information and fake details so that interested people will still proceed to the website/app.

I am not sure what you mean here, can you elaborate?

I mean like the phishing and copycat websites. After scanning, the details are there but they could easily be copied by the cons out there and an innocent person that has scanned it might still proceed especially if the link and first dibs of details are identical. But of course, with UPI, it's unlikely to be done when the details are centralized and managed so I am telling the example about people that aren't into the system that you are using there.

[Faisal2202]

Basically, it's about the fake content of the QR codes that might be used by the scammers/hackers that can land us into fake websites, fake exchanges, or make us download malware and other dangerous stuff that can steal our crypto. So, please bear in mind to be careful to what you usually scan in the internet or even in stores and products. Are there folks here who are a fan of scanning random QR codes? or even not random QRs. That's why I prefer not to scan most of it if it's related to finances and crypto matters.

You are right we should not scan any QR code we see because we don't know what we are scanning and what result we will be getting so until we are not sure we must not scan any QR code as many times there are some people who imprint QR code on the back of their T-shirts or Jackets and other willingly scan them which can be risky but if we think we can take the hit then go on take the risk.

The best way to do this is, keep the finance phone separate from the normal day to day use, and with that phone scan any code you want as your finance will not be affected but still I will suggest don't scan any QR code. With bullish market more people are joining this field of spam, hack as a shortcut way to make more money.

[Peanutswar]

It seems this is another type of modus recently, we know how the QR has become more convenient to use without hassle just scan the code and all of the stored details can easily access beyond the transaction, just hear this recently and got more curious about on it, but it's just like the use of the re-direct of link just in a different approach but the same attack, if you didn't aware with the links possible you will get one of the victim so if you do a casual transaction with the old one and doesn't the same with the current new feature id rather to search first on how others execute this feature and also make sure that this is a kind of legit transaction.

~ this is, keep the finance phone separate from the normal day to day use, and with that phone scan any code you want as your finance will not be affected but still I will suggest don't scan any QR code. With bullish market more people are joining this field of spam, hack as a shortcut way to make more money.

This could be hassle but yes this is one of the ideal thing to do, or else use a wallet for usual transaction and others for business transactions.