What could go wrong scanning QR codes

[HeatBit]

Scanning QR code using a crypto wallet, are they completely safe? Or there are ways that people can still do something wrong while scanning the QR code?

[Charles-Tim]

Just make sure you use the scanner that the app (like the wallet) will popup by itself and make sure the app (or wallet) is not from scammers but from a trusted source and reputable in the public. You have no problem if the QR code is the correct one and not a wrong one.

Another thing is that you should still check the QR code information. Example is a bitcoin address QR code. After scanning, you can still see the bitcoin address where you want to send the money. Make sure it is the recipient address.

[Hypnotizer]

Nothing is “Completely” safe..

Everything has a flaw likewise crypto payment using QR codes and that’s why you still need to be careful when doing anything.

Talking about making  mistakes when using QR codes for payment, I think it’s important to always confirm that the wallet address corresponds to that of the merchant because payment are irreversible.

I don’t know much about the scams that involve QR codes but you can DYOR to find more in-depth information about the Pros and Cons of using QR codes for Crypto Payments.

[Joy_learns_crypto]

Scanning QR code using a crypto wallet, are they completely safe? Or there are ways that people can still do something wrong while scanning the QR code?

I won’t feed you again with almost the same thing although feed to you by Charles team, but I will feed you with this that in every transaction you are making keep both eyes open against scammers, and be careful against mistakes,  you could be scanning a QR code or making a direct wallet address transfer make sure to keep your eyes skinned, no assumptions, look before you leap or in this state of affairs look before you send.

[Mia Chloe]

Scanning QR code using a crypto wallet, are they completely safe? Or there are ways that people can still do something wrong while scanning the QR code?

Well I'll tell you for free, using copy paste of addresses is actually way better and safer than scanning QR codes. One of the major reasons is because you have the liberty of cross checking the address after you've pasted unlike a QR code you can't read with just your Human eye.

That aside cameras these days are easily rigged just like clipboard viruses and malwares. Nevertheless you just have to be very careful else you could fall a victim regardless.

[Ambatman]

You should understand most times things that are convenient are usually not safe
I have been affected by clipboard malware so I understand how dangerous it is
Not trust that what ever you scanned is the right address.
So even if you using a QR always verify
I already made it an habit.

[Stalker22]

Scanning QR code using a crypto wallet, are they completely safe? Or there are ways that people can still do something wrong while scanning the QR code?

A QR code is really just an image showing a wallet address, so on its own, its pretty safe.  The real risk?  Somebody sneaks in their own QR code, swapping it for the real one.

If you are about to send money, slow down and check that the address matches exactly where you want your money to go.  People usually get scammed because they rush and skip the details.

Well I'll tell you for free, using copy paste of addresses is actually way better and safer than scanning QR codes. One of the major reasons is because you have the liberty of cross checking the address after you've pasted unlike a QR code you can't read with just your Human eye.

Actually, I dont think that is true.  In fact, relying solely on copy-paste is a great way to get cleaned out by "clipboard hijackers". A malware that detects a crypto address in your clipboard and swaps it for the attackers address the moment you hit paste.
There is no malware that can hijack the QR code scanner you use through the wallet app directly.  At least for now.  But, whether you scan it or paste it, you still have to verify the address on your device screen, especially on a hardware wallet, before you hit send.  There is no reason why you cant do that with QR codes, as every wallet Im aware of will still display the recipient address after you scan the code.

[promise444c5]

You can’t trust anything these days so always verify..

When you use QR code , it’s likely going to be for scanning address or signing a transaction, contracts et.c.. Apart from it coming from a random website, you can’t trust your device  too so  always confirm whatever details is embedded in the qrcode before taking any further action.
If your wallet only allows blind signing throw it away and find a better replacement.

[BitMaxz]

Actually, using an online wallet is not completely safe. Hackers are constantly evolving, so if you scan any QR code without caution, you risk being hacked and losing your crypto.

It is much safer, as in Electrum, to have a separate online and offline device. When I make a transaction, I will create an unsigned transaction on the Electrum watch only wallet, scan it with my offline wallet to sign it, and then scan it again to the watch only wallet to broadcast the transaction. This is far more secure than simply using QR codes outside your wallet.

[aylabadia05]

Scanning QR code using a crypto wallet, are they completely safe? Or there are ways that people can still do something wrong while scanning the QR code?

It can't be answered with a completely safe answer, as QR code fraud cases are also common, though not as widespread as other scams that result in the loss of large sums of money.
If I may ask, what crypto wallet is being used, so we can find out more and provide guidance.
Online wallets aren't completely safe, as there aren't anywhere between one and five available.

[Cricktor]

OP, define "completely safe". It's likely not possible. Wallets that can scan QR codes commonly use some code library to implement this. Is the QR scanning library safe, without bugs, possible exploits? Depends how well established and maintained the library is.

If you want to check if your wallet scans QR codes properly, you would need another reputable QR scanning app which is privacy focused and can show you properly the decoded content. Your mobile phone's built-in camera app already also likely has the ability to scan QR codes and show you the decoded content. Compare all three. If they match likely everything is fine.

As Mia Chloe already said, humans commonly can't decode QR codes easily just by eyesight. You can do it by hand, but it's tedious and likely nobody actually does it. To verify, see my suggestion above.

[Moreno233]

Just be extremely careful of QR codes because there the risk of phishing buried in it. When you scan QR code, attackers can use it to steal your login details. There is also something called quishing which is tampering and replacement of the code with something else in order to harm whoever scan the code. Like I said before, be extremely careful when scammong QR codes and ensure you trust the source of the code you are scanning.

[Mia Chloe]

As Mia Chloe already said, humans commonly can't decode QR codes easily just by eyesight. You can do it by hand, but it's tedious and likely nobody actually does it. To verify, see my suggestion above.

Well in my opinion, QR codes should be considered as the least option or better still, just a side option because of the risks of sending to a wrong address. Many people can't tell the difference of they are not copy pasting I want to assume these as some of the reasons why most payment portals have address copy paste as the fit option.

Let's be sincere and ask ourselves how many people will actually go out of their way to get an extra scanner when they are even looking to use a fast method instead.

[EL MOHA]

Well in my opinion, QR codes should be considered as the least option or better still, just a side option because of the risks of sending to a wrong address. Many people can't tell the difference of they are not copy pasting I want to assume these as some of the reasons why most payment portals have address copy paste as the fit option.

Let's be sincere and ask ourselves how many people will actually go out of their way to get an extra scanner when they are even looking to use a fast method instead.

I disagree one this if you say the least, the means you are actually ranking lower than even typing. Yes I get your clear points correctly but are saying that you wouldn’t be able to actually see the address scanned from the QR code? I don’t think it’s true because once you scan a QR code either the URL will show or the address will autofill on the recipient option which you can also cross check,

A device is easy to actually have clipboard malware than a camera hijack by scammers. The easiest scam on QR code scan is if the QR code itself has been tempered with and that’s not from your end. The problem from your end will be your Phone been tempered by which the camera scan actually shows a wrong address and if this happens then even clipboard malware will be on that device which means copy and paste will still easily face same faith.

QR code are appreciated more by Cold wallet users

[JiiBs]

Scanning QR code using a crypto wallet, are they completely safe? Or there are ways that people can still do something wrong while scanning the QR code?

I think QR codes is one of the most scary things there is when initiating Bitcoin payments. Yes, it might seem like a seamless process in other to get the address for a payment but, when it isn’t something that is generated at once between yourself and a known party, it gets scary.
All it could take for someone with the know how to hack into your device is to have that popular easy fixed QR code replaced, have you scan it and the did is done. It’s not always about the wrong address, but it being a potential pathway to hacks and malware infiltration.

[Mia Chloe]

QR code are appreciated more by Cold wallet users

Understand that going toe to toe with hardware wallets and your regular device that surfs the internet you are quite safer with the cold storage. That aside remember that if a cold storage is the scanning device then same thing I said initially still applies because how sure can you actually be that the address you scanned is correct?

The most that happens is where the QR gets swapped before the scan taking those coins to an entirely different address and the issue is you can't notice easily because you can't read the QR directly. Cases where the output after scanning is swapped before it gets recorded by the wallet is very rare and won't work on hardware wallets.

[joniboini]

The most that happens is where the QR gets swapped before the scan taking those coins to an entirely different address and the issue is you can't notice easily because you can't read the QR directly.

I was under the impression that the quoted reply talks about using these codes on a platform that shows the deposit address directly with a QR code as an easy medium to input that address. Which is to say, someone can easily verify whether the detected address is the same or not, whether they use HW or something else. Unless the website itself is faulty and shows the wrong address (I don't know if they can detect whether someone has scanned the QR code on the fly without any connection), I suppose it won't be difficult to verify them. CMIIW.

[bitbollo]

Always use a wise approach. QRcodes are just images that could not interact "immediately" with commands/actions.
If you use a standalone app that show only the code you can easily check what you was searching for.
The real issue with QR codes would be to be directed to another fake website or to execute some code that clearly you don't understand (likewise signing a login or signing a transaction).
If you are going to send btc to an address that start with a certain prefix you can easily double check and so on.

[OcTradism]

Scanning QR code using a crypto wallet, are they completely safe? Or there are ways that people can still do something wrong while scanning the QR code?

Something can be wrong with QR codes if scammers try to set up something for scamming you. Perhaps you are familiar with phishing term but with QR code, there is a Quishing scam type.
What is Quishing?
How impersonation scammers are using QR codes to steal your information.
Scammers hide harmful links in QR codes to steal your information.
How to tell if a QR code is a scam before scanning it.

The principle is if you are sending bitcoin to any receiver, you can try with a small transaction firstly, to see how it works whether well or not. If you are scammed, it's just a small transaction/ payment for testing. If the small test is well, you can bookmark/ label that address and make your second transaction for finalizing the business deal.

[HeatBit]

Scanning QR code using a crypto wallet, are they completely safe? Or there are ways that people can still do something wrong while scanning the QR code?

Well I'll tell you for free, using copy paste of addresses is actually way better and safer than scanning QR codes. One of the major reasons is because you have the liberty of cross checking the address after you've pasted unlike a QR code you can't read with just your Human eye.

That aside cameras these days are easily rigged just like clipboard viruses and malwares. Nevertheless you just have to be very careful else you could fall a victim regardless.

When someone scan a QR code with a crypto wallet isn't the address in the QR code going to be visible? I think this is how it works but you are right, copy pasting makes you check the address out, but I believe it's the same with scanning QR code, the address is supposed to display before you making transaction.

Tell me if I am wrong.