Are QR Codes safe to use?

Quick Response (QR) codes are relatively easy to use and have become a commodity during the pandemic. Many more people are willing to use these codes (or forced in some cases) because of the “avoid touching” culture that continues to be embedded in our minds. The thing is that many of the new ways of doing things from the past two years will probably stick around for good. Are cybercriminals taking notice? Of course, their job is to master our behavior to then use it against us.

If we’re using QR codes, then why not modify these and embed malicious sites to steal personal information or money? This is exactly what happened in the state of Texas.

Multiple cities in Texas recently reported spotting fake QR codes in parking meters. The issue was so widespread that even the FBI had to get involved in the case. People were approaching parking meters, scanning QR codes that were placed on the equipment, and then the code would lead them to a malicious website. Users were then prompted to enter their credit card information and make payment.

Did they think twice about moving forward with this process? Probably not.

It was not until later when people checked their purchases or got an alert that they realized it was all a scam. The truth is that many of us trust that official city equipment like parking meters are reliable. And since the whole transaction probably took less than a minute, there wasn’t much time to alert buyers that something could be wrong.

The good thing is that we can learn from what has already happened and prevent it from happening to us. How do we do that?

First, we learn how QR codes work, who is using them, and what makes them vulnerable.

How do QR Codes work?

QR codes work similar to barcodes. They’re a machine-scannable image that can instantly be read using a smartphone camera. You simply have to open you phone’s camera and hold it close enough for the QR code to be detected. Once your Smartphone starts reading the code, it translates that information into data that can be understood by humans.

Who is using QR codes?

QR codes are a versatile tool and therefore used in most industries. Their capacity to store large amounts of data is definitely an attractive feature. Many businesses are using QR codes for restaurant menus, packaging, and links to websites. Many companies, especially those that are environmentally-friendly, also promote the use of codes as these reduce the demand for printing.

What makes codes vulnerable?

QR codes, like other links, can contain malware or open the door to a phishing attack. Hackers can either insert malicious links on QR codes or email attachments. And although most companies have anti-viruses software for company emails, a QR code might go unnoticed. This is why it’s important to avoid opening codes from emails, especially, if you can’t confirm that they come from a trustworthy source.

Can you spot a fake QR code?

Most likely you will not be able to distinguish a fake code. The most important thing to remember is that if you’re unsure of its legitimacy, it’s best not to scan it. Additionally, you can use this rule when using QR codes: only use codes to obtain information not to give away yours.

Consider paying with cash or make payments only on official websites and apps. If a QR code asks you for any personal information, it should be a red flag and the clue to exit right away.

What to read next – 5 Ways to Protect your Remote Access App

The post Should you scan that QR code? appeared first on VinTech Systems.

Occasionally, our clients notify us about phone calls they’ve received from a scam artist claiming to be computer techs associated with VinTech. These scammers say that they’ve detected viruses or other malware on their computer to trick them into giving them remote access or paying for software they don’t need.  But the purpose behind their scheme isn’t to protect your computer; it’s to make money.  VinTech does not make unsolicited phone calls to request personal or financial information, or to fix your computer.  Treat all unsolicited phone calls with skepticism and don’t give any personal information.

To look at the magnitude of the problem, we want to share a statement from an e-mail we recently received from ComEd. This well-known electricity provider sent this e-mail to their clients warning them of scams. The statement read:

“Watch out for scams. For your protection, never provide your social security or personal information to anyone you are not familiar with over the phone, never send money to another entity other than ComEd, and never pay using a payment account provided to you by an unknown individual”. 

This well-known company is over 100 years old, yet scam artists use its name to steal client’s confidential information.

With these helpful tips, not only can you avoid telephone rip-offs but doorstep cons as well.

Death of Sales Man

If a sales person knocks and you feel uncomfortable opening your door, simply do not open it. This is perfectly acceptable and expected since you did not inquire about their service. If you do open the door, don’t allow them inside you home. Are they being pushy?  Be very cautious, this is a tactic to survey your valuable possessions and return later to steal them.

Who is this?

Authenticate the person calling or knocking your door. Ask for their full name and credentials. Additionally, confirm the company they represent. Never heard of it? Can’t find it online? It’s likely it doesn’t exist.

Protect your identity

Never provide personal information over the phone. Ask the caller to have your merchant call you directly. Let them know you prefer to speak with a familiar employee.

Is this a reputable source?

Conduct a quick search on the company with the Better Business Bureau. This trusted source will help you determine if the business is legitimate. They provide a detailed business report including verification of credentials.

Contact your service company

Call the company to verify they sent this person to your home. It is uncommon for businesses to send an employee without contacting you first. Don’t be fooled by a uniform. A scam artist can wear it to look trustworthy.

Choose a local company

Its best to hire a company that has their own employees. Some large security companies subcontract their work. Third party sources are more difficult to verify. Should you really trust them?

Contracts

Do not allow the sales person to pressure you. If they insist on you signing a contract, tell them you prefer to review the contract before signing.

All your service providers should be trustworthy but you must be especially careful when choosing a security provider. Having a home security system can give you peace of mind but only when you trust the people who are managing it.

The post 9 Tips that Tackle Every Scam Artist appeared first on VinTech Systems.