If I asked of bitcoin address from people, they send the address not in QR code.
The only time I make use of QR code while doing something about bitcoin or other cryptocurrencies is when I am sending coins to myself using two devices. Although, the QR code can be saved and be used in the same device.
Another area I use QR code is not related to cryptocurrencies at all. It is when I want to check the authenticity of a problem that will require people to scam QR code to know if the product is original or fake.
QR code is safe to use for me.
This is fine if you are using it to yourself because you can check it out and the authenticity of where it is directing you upon scanning the QR code of your own wallet. And about checking the authenticity of a product, it's also true that this system is being used by those companies for their consumers to see the validity of the product that is bought by them. Seems you have no problem with it and you should be fine using QRs as long as you're aware of it and you have some good practice by using it.
scanning QR codes unless the one sent to me from someone or I find from which I trust I don't even take the risk of scanning anything, and with how sensible these new gadgets are now, just by using your camera close to a QR code, it will be detected, and you will be asked if you want to check the content, which I always reject. It's really easy to avoid such scams; that's for those vigilant enough.
In terms of QR code scams, where I'm very fearful, are those who use random websites to convert valuable and sensitive information into QR codes, which the website can store those information for later use.
If you don't know the source of the QR, you should be fearful and if you are someone that just random scans everything, you have to be careful.
I didn't know about Quishing but scam through QR codes is one of scam types.
QR Code Generator ScamsIt can be a fake QR code generator or other things for scam with scammer addresses or links to visit phishing sites or download fake applications.
It’s safe to assume that some people prefer using QR Codes rather than wallet addresses simply because it’s quicker to do a QR Code scan using a mobile phone.
Due to this, some people resort to using “QR Code Generators” or “converters” to convert a wallet address to a usable QR Code.
How the scam works- The victim opens the fraudulent bitcoin address-to-QR code converter.
- The victim enters his/her wallet address.
- Instead of giving the victim the QR code of the wallet address he/she entered, the scammer instead displays a QR code of a different wallet address that the scammer owns
- The victim then unintentionally sends funds to the scammer thinking that he/she’s sending the funds to his/her own wallet.
How to protect yourself- Always double-check if the service you’re using is actually giving you the correct and legitimate QR code.
The convenience is there upon using QR codes but the scammers/hackers are also taking advantage of it. So, if you are someone who is not aware of these scams that are circulating in the space, they're targeting you. But as long as you know how it works and you're always vigilant with the QRs that you are scanning then you'd probably be safe. Because one thing for these QRs is possibly can make you download automatically the contents that are tools for them to actually hack someone's device.
I never scan physical qr codes as they are very easy to replace wherever they are placed and I don't go to restaurants where menus are only accessible through scanning a code
I still scan qr codes from certain websites. For those to be changed the website needs to be compromised which effectively puts everything on it at risk.
Qr code swaps is more dangerous when executed, cause most people do not bother to inspect the url it leads them to, to check for any difference between that and the original, generally letting down their guard somewhat.
You're right, I am aware of these qr code swaps that happen mostly in these establishments where the robber swaps their qr for the payments of the customers. But this is pretty much the same as quishing IMO. I haven't been into restaurants that requires their customers to scan for the menus, that sucks and time consuming to be honest.
The scammers can do many things if they want to deceive their targets as they can pick the target randomly from what they get. This QR codes maybe is new for many people so they will not thinks much about that especially if they want to make a transaction using QR codes. That is why we must always be careful and not easily scan the QR codes for the suspicious transaction and investigate first before we decide.
We must reminds about this news to many people around us so they can still be careful when they want to transact with other parties. It is better not to scan the QR if we are not sure and use the transfer methods to avoids the mistake.
Yup, that's what we can do. To remind our families and friends and the community that we are in to be careful of such. Little did they know that the qr codes that they're scanning could lead to their potential losses and other troubles that they don't want to get in.
Just use an application which can show you the URL that is being scanned instead of simply navigating to it in the browser, and you will be able to mitigate almost all quishing attempts.
Also don't scan random QR codes just for fun, only scan stuff that you're actually expecting to scan. Just like you wouldn't click on any old link, you should scan any old QR code either.
I agree, don't just scan random qr codes for entertainment but I see this happen sometimes that there were people out of curiosity want to try it. And that's a good choice about scanning the QR to know what's in it, do you have any application in suggestion for that task?
I have read about quishing sometime ago. I don't think quishing is very common because, the number of people that uses QR code often isn't that massive, compare to those that just prefer to use a direct URL via their browsers, though I can admit that this technic is very helpful to scammers because it isn't that difficult to create and put online or printed on a paper shit.
I have seen several QR codes that are printed on paper, in most cases, with captions that are very attractive or convincing. Personally, I scan QR codes, but from popular products only. And I think one problem with QR is that it doesn't give a preview of the website it wants to take you to, which is why I prefer to scan popular products Instead, rather than just checking out everything with a QR code that comes my way
That's why if there are some apps that can be used in scanning those QRs revealing what's the link or app behind it will be useful but I don't know any nor used one. Waiting for some suggestions and we'll put it up on the OP for others to see it since not everyone will read everyone's reply here.
This is another sophisticated techniques scammers use to steal from their victims. Many people would easily fall into this because there is no way to verify through the QR code if what they are scanning is legit or fake as it directs them to the website or whatever they are in search of without any warning or sign for them to stop. I really do not scan QR codes from random sites except on recommendations from a reputable member or person who can vouch for such services to be real, legit and genuine before I scan any QR code. To be honest I barely use it for payment or purchase of anything except from the Crypto exchange directly which I am very much sure of or I got a direction from the staff of such organisation using the QR code for their services then I can conveniently use it otherwise I do not make the mistake of using it for some random website.
People who barely use it are pretty much safe and those who are just typing the words or links that they often visit. But the trend might go there that people will use QRs from time to time because it's quicker and more convenient for most and these cons are going to take advantage of it.
To be honest, i have noticed an increase of QR codes related to crypto popping up quite frequently in the last few months.
Before that it was usually someone shilling Pi, but now its all sort of stuff.
I assumed it was just referral hunting, but it might as well be a scam website
That's probably one start of it, any technique that's built within it is going to have some time to understand that they can do it also for harming others and stealing people's money. If it's just for referral hunting, that's annoying but it's way finer than of robbing people through it.
I see so it works like a normal phishing site too. The only difference is that this one is done via QR code scanning. Well if were directed to a fake site just dont use it or explore around it. But is there a report that if you scan alone a QR and youll get scammed or robbed based on scanning or nah? Thats too much if its in only scanning were gonna be hack or scam.
I think the curiosity of someone that has been redirected to a fraud website through a QR will stick for a couple of seconds or minutes trying to explore around. And that's when the user is likely to get victimized by that con. You'll only get robbed or scammed unless you pursue to what they instruct to do based on the fake websites alone like signing up of keys/seeds or much worse if it's redirected to an automatic downloading files sharing website that contains a malware. So, there are still some steps before someone becomes a victim but hopefully none will be from here or from the other platforms.
Criminals have a way of exploiting any liphol in any development, and not only is cryptocurrency one of the most focus points of exploitation other financial activities too are sometimes victims of those criminals too like the bank account hack through information stolen from victims' phone, this have been around for a while now and QR code scanner and it development is no thought a possible exploitative means to hackers too which mean one can actually scam a virus inflicted QR codes and get device effected.
At this point we all need to be careful and should scan only codes from authorised dealers and not scan any random codes most especially when it comes from online third party services, I also have not scan a cryptocurrency address before and anytime I want to send a coin I copy the address directly and recheck to see before sending coins.
They always reinvent and try to use the innovation that's happening in the corner. That's why they upgrade and so as the technology and we as users and consumers, we also need to be aware of these trends even if it doesn't sound too techy for some but the majority are from normal to average type of users of these QR codes.
The severity of this phishing attack depends on the QR-code scanner (app) you are using.
Any decent app will easily recognize the valid URL but will not open it automatically. It will decode the image, display the URL (or whatever data it finds) in plain text and then ask you if you want to visit that link.
QR codes, as any other technology, are supposed to make our lives easier but we need to be careful when dealing with them. Just don’t scan random codes and if you do, make sure to decode it to see the data it stores in plain text.
Most of the QR codes that I have tried to scan before always directs me to the links that they are supposed to direct me and all of them opened automatically. So, maybe I'd test it out with some other qr code scanner that I haven't used. But I hope that the QR code scanner developers will make some features like this to protect their users too.
Any scam that happens with Fiat has its own equivalent in cryptocurrency. And as Bitcoin is already getting global adoption and recognition,these scams will continue to increase.
Quishing scams I learned is not new as even it happens in parking meters.
I don't scan QR codes for any payments. I can say that I am safe but I those who use QR codes and have to scan to make payments and are not aware of this are not. Those who we feel don't know about this should be informed.
Do not scan QR codes absentmindedly. And be vigilant when scanning a new QR code for the first time. If it doesn't feel right, stop the transaction.
Good for you if you don't typical scan qr codes. But at some point, you'd probably be sure to try it out when time permits or some transactions you have personally asks you to do so. And yet, as you've said, you also need to be careful about it.
Well, if someone sent me a qr code is I don't scan it with the app it requires to scan. I came across this kind of phishing on X (formerly twitter) where the scammer used qr code where it tells that you will earn money but if you scan the qr code is it will ask to send crypto to a wallet address with the amount that the scammer set. If I don't want to use the app is I use online qr code scanner to see what the qr code contain to make it safe.
Exactly, that's how it goes as it can be used for various techniques by these people that takes advantage of the people that don't know how their gimmicks are. Stay safe!
Sounds weird but yeah this is actually happens. I saw similar incidents here my local where QR codes that needs to scan for payment in local stores where changed, probably directly to scammer's payment method, it might sound stupid because they can expose their own info when the victims successfully sent a payment since some info like names are shown in the app after payment but they can just make a fake names and info on that.
Mostly, they are going to use some fake or dummy accounts for receiving it that have generated the fake QR code for payment but like you guys have mentioned, it's just one of the many ways these cons are using quishing for these harmful purposes they have.
