Author

Topic: Beware of QUISHING (Read 573 times)

legendary
Activity: 882
Merit: 1873
Crypto Swap Exchange
January 17, 2025, 11:51:32 PM
#49
Very likely, scanning a QR code won't harm you, but what you do next after scanning it will be more risky and decide will your device be compromised and accessed by hackers or not.
I doubt you can consider your device accessed by Hackers after simply scanning a QR code, unless the QR code is actually Malware the device will read as not just plain text but a Script or something.  Which most likely involves the perpetrator finding a really high vulnerability and attempting to Scam others.  Which I am not saying is impossible, but it is unlikely.

Even if you scan QR codes of which source you do not even know.  It is not a big risk if you separate devices anyway.  If you scan them using your phone, you should supposedly have your information backed up some where and that should NOT be the device containing most sensitive information.  If you have a habit of scanning random QR codes, it may be good practice to simply have a separate device strictly for that purpose then.  Just my opinion and what I would do if I truly had this curiosity often.
legendary
Activity: 2044
Merit: 1018
Not your keys, not your coins!
January 15, 2025, 10:00:57 PM
#48
Obvioulsy, this was similar to my response initially which was not properly understood, how can one prevent a scam from QR codes when they have no idea the content of what they are scanning
It started with what is a source of that QR code?

Where did they receive the QR code?
Who is a sender of QR code?

With me, if I receive a QR code from a stranger, I don't mind to scan it.

Quote
what if they read a different something from the paper writeup and what they scanned was quite different from what they read how do you explain it not to talk of when what you scanned from is coming from a random post online maybe an advert or post you picked interest in but have no clues about the organization or the account that posted or uploaded it.
Very likely, scanning a QR code won't harm you, but what you do next after scanning it will be more risky and decide will your device be compromised and accessed by hackers or not.
sr. member
Activity: 728
Merit: 421
January 14, 2025, 04:23:00 PM
#47
I’m really not a fan of scanning QR codes for anything, I only do it in rare occasions, like when I’m trying to send crypto from one wallet or exchange to another, and I only do this because I want to avoid copying an incorrect address or falling victim of clipboard scam, if I’m making such transactions, and I really do not have the luxury of critically double checking the address (which I do everytime I am making transactions) I just screenshot or save the QR code and scan it, I think that’s the only occasion I can remember scanning QR codes.
But scanning QR codes does nothing to prevent a similar Scam.  You still need to check every thing and make sure you are not going to fall for a similar Scam.  If anything, QR codes may be worse than the Clipboard Scam!  You are scanning a code you can not even read, how do you know it is the right code or that the device you are using to scan it is displaying the correct information of that QR if you are not even checking them?

Obvioulsy, this was similar to my response initially which was not properly understood, how can one prevent a scam from QR codes when they have no idea the content of what they are scanning, what if they read a different something from the paper writeup and what they scanned was quite different from what they read how do you explain it not to talk of when what you scanned from is coming from a random post online maybe an advert or post you picked interest in but have no clues about the organization or the account that posted or uploaded it.

I do not doubt your stand on QR codes is likely to be worse than clipboard scams because QR codes are an automatic process that you can not control if I am not mistaken so reversing the process might likely be impossible because it is a command that has already been prompted to take effect and can not be likely reversed immediately.
legendary
Activity: 882
Merit: 1873
Crypto Swap Exchange
January 14, 2025, 04:07:41 PM
#46
I’m really not a fan of scanning QR codes for anything, I only do it in rare occasions, like when I’m trying to send crypto from one wallet or exchange to another, and I only do this because I want to avoid copying an incorrect address or falling victim of clipboard scam, if I’m making such transactions, and I really do not have the luxury of critically double checking the address (which I do everytime I am making transactions) I just screenshot or save the QR code and scan it, I think that’s the only occasion I can remember scanning QR codes.
But scanning QR codes does nothing to prevent a similar Scam.  You still need to check every thing and make sure you are not going to fall for a similar Scam.  If anything, QR codes may be worse than the Clipboard Scam!  You are scanning a code you can not even read, how do you know it is the right code or that the device you are using to scan it is displaying the correct information of that QR if you are not even checking them?
full member
Activity: 294
Merit: 202
RATING:⭐⭐⭐⭐⭐
January 12, 2025, 11:51:13 AM
#45
I’m really not a fan of scanning QR codes for anything, I only do it in rare occasions, like when I’m trying to send crypto from one wallet or exchange to another, and I only do this because I want to avoid copying an incorrect address or falling victim of clipboard scam, if I’m making such transactions, and I really do not have the luxury of critically double checking the address (which I do everytime I am making transactions) I just screenshot or save the QR code and scan it, I think that’s the only occasion I can remember scanning QR codes.
newbie
Activity: 15
Merit: 1
January 12, 2025, 09:10:53 AM
#44
It really always comes down to trust, as always. Just like with URLs/links, you need to be cautious about where you're clicking. The same principle applies to QR codes. You wouldn't click a spam/scam link in an email from an unknown sender, so why scan a random QR code?

In terms of restaurants, they should be held accountable for any QR codes they are asking patrons to use.
legendary
Activity: 882
Merit: 1873
Crypto Swap Exchange
January 11, 2025, 06:21:36 PM
#43
Popularizing QR Codes is one of the shittiest thing we have done.  Do not get me wrong, there are many cases of QR Codes being actually useful.  I am using QR Codes often with Electrum and Bitcoin generally, so there is that.

However.  It got to a point where many restaurants in my country offer QR Codes for menus.  Electronics have QR codes for instructions and for downloading their App.  People are printing QR codes for their advertisements or on their clothing like others said here.  And so on.  And this is a big Security risk.  We should not have to own separate phones for separate actions, the way things used to be before hand were simply much Safer and did not require such complicated methods.

A perpetrator with a little sleight of hand could quickly replace restaurant menus with malicious QR Codes.  Or, they could use QR Codes through advertisement that also contain malicious information.  There are many ways this can go wrong.  Particularly when not many people know how to use them properly, what they actually are and how to avoid falling to a malicious QR trap!
hero member
Activity: 3234
Merit: 775
🌀 Cosmic Casino
January 11, 2025, 05:30:34 PM
#42
Basically, it's about the fake content of the QR codes that might be used by the scammers/hackers that can land us into fake websites, fake exchanges, or make us download malware and other dangerous stuff that can steal our crypto. So, please bear in mind to be careful to what you usually scan in the internet or even in stores and products. Are there folks here who are a fan of scanning random QR codes? or even not random QRs. That's why I prefer not to scan most of it if it's related to finances and crypto matters.
You are right we should not scan any QR code we see because we don't know what we are scanning and what result we will be getting so until we are not sure we must not scan any QR code as many times there are some people who imprint QR code on the back of their T-shirts or Jackets and other willingly scan them which can be risky but if we think we can take the hit then go on take the risk.

The best way to do this is, keep the finance phone separate from the normal day to day use, and with that phone scan any code you want as your finance will not be affected but still I will suggest don't scan any QR code. With bullish market more people are joining this field of spam, hack as a shortcut way to make more money.
Everything where our wallets are in, I agree, they should be separated. Those that are able and can have some back up phones, can do this. But not all of us can afford to do this. So, it's best to avoid just being curious and make sure to know what you're trying to scan if ever you're required to do so.

It seems this is another type of modus recently, we know how the QR has become more convenient to use without hassle just scan the code and all of the stored details can easily access beyond the transaction, just hear this recently and got more curious about on it, but it's just like the use of the re-direct of link just in a different approach but the same attack, if you didn't aware with the links possible you will get one of the victim so if you do a casual transaction with the old one and doesn't the same with the current new feature id rather to search first on how others execute this feature and also make sure that this is a kind of legit transaction.
Yes, this is the same attack but it's another way for attackers waiting for their bait to be taken by their victims. That's why if curiosity ticks in and even if the links are appearing before going on, it's now the problem of the user if they didn't checked it carefully.
legendary
Activity: 1932
Merit: 1549
January 09, 2025, 07:58:00 AM
#41
I know if invalid QR Codes that are mostly used by some business people especially those once that franchise other people business without legal permission, and I also know that people can generate QR code on their own, but I never think scammers has adopted the way to keep injecting virus or keep scamming people every day in the internet.
Scammers may use any popular means among people to inject phishing links, trojans, malicious files, etc. just to direct people to them in a way that may be unfamiliar to many.

Many may think that when they find the QR code they are dealing with an official entity or an authorized business. However, they do not know the fact that anyone can easily create such a QR code, and scammers can also place it on their phishing websites and other fraudulent means to make them look more professional. They can even put it on store walls and in popular places just to make people scan the phishing QR code and fall into the scammer's trap, which will eventually cause them to lose their money in the blink of an eye. Therefore, this topic is definitely useful for anyone who scans any QR code they find without verifying its source.
legendary
Activity: 1806
Merit: 1437
Wheel of Whales 🐳
January 09, 2025, 07:15:15 AM
#40
It seems this is another type of modus recently, we know how the QR has become more convenient to use without hassle just scan the code and all of the stored details can easily access beyond the transaction, just hear this recently and got more curious about on it, but it's just like the use of the re-direct of link just in a different approach but the same attack, if you didn't aware with the links possible you will get one of the victim so if you do a casual transaction with the old one and doesn't the same with the current new feature id rather to search first on how others execute this feature and also make sure that this is a kind of legit transaction.

~ this is, keep the finance phone separate from the normal day to day use, and with that phone scan any code you want as your finance will not be affected but still I will suggest don't scan any QR code. With bullish market more people are joining this field of spam, hack as a shortcut way to make more money.

This could be hassle but yes this is one of the ideal thing to do, or else use a wallet for usual transaction and others for business transactions.
hero member
Activity: 1428
Merit: 513
Payment Gateway Allows Recurring Payments
January 08, 2025, 01:11:25 PM
#39
Basically, it's about the fake content of the QR codes that might be used by the scammers/hackers that can land us into fake websites, fake exchanges, or make us download malware and other dangerous stuff that can steal our crypto. So, please bear in mind to be careful to what you usually scan in the internet or even in stores and products. Are there folks here who are a fan of scanning random QR codes? or even not random QRs. That's why I prefer not to scan most of it if it's related to finances and crypto matters.
You are right we should not scan any QR code we see because we don't know what we are scanning and what result we will be getting so until we are not sure we must not scan any QR code as many times there are some people who imprint QR code on the back of their T-shirts or Jackets and other willingly scan them which can be risky but if we think we can take the hit then go on take the risk.

The best way to do this is, keep the finance phone separate from the normal day to day use, and with that phone scan any code you want as your finance will not be affected but still I will suggest don't scan any QR code. With bullish market more people are joining this field of spam, hack as a shortcut way to make more money.
hero member
Activity: 3234
Merit: 775
🌀 Cosmic Casino
January 08, 2025, 12:09:55 PM
#38
I keep saying this that it's not news that scammers are getting better in their deeds and if you check, they're using the originality and authenticity of QR codes to do their dirty work but for me, just like how it's not cool to tap on links that seems suspicious because there will always be something to give these scammers away, that's the same way one has to be careful when scanning random QR codes. I means with the wide ranges of scam everywhere, I think the thought of scanning a random code would send warning bells in my head.
And don't do that even if your curiosity is trying to hit your head doing it, never.

It's good if there is a system like that in most countries. If there's a way to determine and check out the details first and see the whole thing about the scanned QR, that's amazing. But even if the system is like this and we get to see a glimpse of the details of the QR that we scan,

Leaving UPI alone, I scanned random QR using mobile's camera and it shown the details and you decide what to do with it instead of directly redirecting on website/app, I guess this is as good as it gets.
Yeah, that's it. The decision is still on us but not all folks are like us and can spot something suspicious that is shown in the details. There goes those folks that hits to continue without assessing what's on the details but, we can't do anything with that and they're on their own if they still fall for those suspicious details even they're already appearing in front of them.

Quote
... those who take advantage of it will use the same information and fake details so that interested people will still proceed to the website/app.

I am not sure what you mean here, can you elaborate?
I mean like the phishing and copycat websites. After scanning, the details are there but they could easily be copied by the cons out there and an innocent person that has scanned it might still proceed especially if the link and first dibs of details are identical. But of course, with UPI, it's unlikely to be done when the details are centralized and managed so I am telling the example about people that aren't into the system that you are using there.
hero member
Activity: 2520
Merit: 952
January 08, 2025, 01:17:10 AM
#37
Are there folks here who are a fan of scanning random QR codes? or even not random QRs. That's why I prefer not to scan most of it if it's related to finances and crypto matters.
On scanning QR codes, I scan plenty and they are all related to finance matters.

We have thing called UPI here in India — you scan qr code, it fills vendor details, you enter amount to pay (in case, it's not dynamic qr code) and make payment. It's really convenient so it has kinda become norm to make payments this way.

Do note that making payment still requires your confirmation, it's just filling details is easier this way.
It's good if there is a system like that in most countries. If there's a way to determine and check out the details first and see the whole thing about the scanned QR, that's amazing. But even if the system is like this and we get to see a glimpse of the details of the QR that we scan,

Leaving UPI alone, I scanned random QR using mobile's camera and it shown the details and you decide what to do with it instead of directly redirecting on website/app, I guess this is as good as it gets.

Quote
... those who take advantage of it will use the same information and fake details so that interested people will still proceed to the website/app.

I am not sure what you mean here, can you elaborate?
hero member
Activity: 1008
Merit: 629
January 07, 2025, 07:25:51 PM
#36
 I keep saying this that it's not news that scammers are getting better in their deeds and if you check, they're using the originality and authenticity of QR codes to do their dirty work but for me, just like how it's not cool to tap on links that seems suspicious because there will always be something to give these scammers away, that's the same way one has to be careful when scanning random QR codes. I means with the wide ranges of scam everywhere, I think the thought of scanning a random code would send warning bells in my head.
hero member
Activity: 3234
Merit: 775
🌀 Cosmic Casino
January 07, 2025, 06:41:25 PM
#35
Are there folks here who are a fan of scanning random QR codes? or even not random QRs. That's why I prefer not to scan most of it if it's related to finances and crypto matters.

On scanning QR codes, I scan plenty and they are all related to finance matters.

We have thing called UPI here in India — you scan qr code, it fills vendor details, you enter amount to pay (in case, it's not dynamic qr code) and make payment. It's really convenient so it has kinda become norm to make payments this way.

Do note that making payment still requires your confirmation, it's just filling details is easier this way.
It's good if there is a system like that in most countries. If there's a way to determine and check out the details first and see the whole thing about the scanned QR, that's amazing. But even if the system is like this and we get to see a glimpse of the details of the QR that we scan, those who take advantage of it will use the same information and fake details so that interested people will still proceed to the website/app.

Yes, I used one recently while logging to my Binance exchange app on my browser, it was easier for me than to use any fake or clone website that will lead to scam and I was avoiding imputing my data manually for security reason; it was successful and I never expected such scam QR Code way.

I know if invalid QR Codes that are mostly used by some business people especially those once that franchise other people business without legal permission, and I also know that people can generate QR code on their own, but I never think scammers has adopted the way to keep injecting virus or keep scamming people every day in the internet.
Thank you for this update, I hope we will be vigilant and be careful of the codes we scan.
Now that you know, everyone is free to use qr code generators or the actual accounts that they have will serve their own QRs and replace it if it's about the payments. But the other danger is about tricking people into scanning these qrs into fake websites or direct them to file sharing websites to download their malware.

Part of where the problem lies for this kind of phishing is that, it doesn’t necessarily have to be an attempt to do a Bitcoin or cryptocurrency transaction. QR codes serves a variety of purposes today and comes with some ease to work and payment I tell you that. You having to just scan the bar code and have all the necessary information to a services displayed for ease access and convenience is what everyone wants to get. Unfortunately, there are always bad actors who seek out ways to exploit what we enjoy for their criminal activities. One cannot be too careful in avoiding these scams but, having your expose these tricks creates in everyone a mental alertness to the issue.
Even if the details are there and displayed, many cons can play it out and just display fake details to give the victims confidence for them to proceed and the next thing that happens is what we know then.
legendary
Activity: 1666
Merit: 1158
January 06, 2025, 04:20:10 PM
#34
Part of where the problem lies for this kind of phishing is that, it doesn’t necessarily have to be an attempt to do a Bitcoin or cryptocurrency transaction. QR codes serves a variety of purposes today and comes with some ease to work and payment I tell you that. You having to just scan the bar code and have all the necessary information to a services displayed for ease access and convenience is what everyone wants to get. Unfortunately, there are always bad actors who seek out ways to exploit what we enjoy for their criminal activities. One cannot be too careful in avoiding these scams but, having your expose these tricks creates in everyone a mental alertness to the issue.
hero member
Activity: 1064
Merit: 747
January 06, 2025, 10:24:31 AM
#33
Are there folks here who are a fan of scanning random QR codes? or even not random QRs. That's why I prefer not to scan most of it if it's related to finances and crypto matters.
Yes, I used one recently while logging to my Binance exchange app on my browser, it was easier for me than to use any fake or clone website that will lead to scam and I was avoiding imputing my data manually for security reason; it was successful and I never expected such scam QR Code way.

I know if invalid QR Codes that are mostly used by some business people especially those once that franchise other people business without legal permission, and I also know that people can generate QR code on their own, but I never think scammers has adopted the way to keep injecting virus or keep scamming people every day in the internet.
Thank you for this update, I hope we will be vigilant and be careful of the codes we scan.
hero member
Activity: 2520
Merit: 952
January 06, 2025, 09:13:44 AM
#32
Are there folks here who are a fan of scanning random QR codes? or even not random QRs. That's why I prefer not to scan most of it if it's related to finances and crypto matters.

On scanning QR codes, I scan plenty and they are all related to finance matters.

We have thing called UPI here in India — you scan qr code, it fills vendor details, you enter amount to pay (in case, it's not dynamic qr code) and make payment. It's really convenient so it has kinda become norm to make payments this way.

Do note that making payment still requires your confirmation, it's just filling details is easier this way.
hero member
Activity: 3234
Merit: 775
🌀 Cosmic Casino
January 06, 2025, 05:41:49 AM
#31
This is the first time I heard of Quishing. So, here's another newborn word.

I don't know if this is available to all phones, but when I open my camera on a QR code, it indicates where it leads me. I've used this a handful of times to verify QR codes. But aside from this, is there a standard way to know what the QR is all about? We aren't necessarily asked to confirm that we're about to enter this and that site, for example, each time we scan QR's, right?

I'm not really a big fan of QR. Even in paying or depositing, I prefer the old manual version of making inputs. Perhaps I'm just used to the old and somehow inconvenient way of doing things, but it seems more secure. You're allowed to doublecheck and verify.
Usually, it's about the website of the service or product that they're selling and the bad guys are taking advantage of the people who are not aware of this hack which can lead the unaware people into visiting the wrong website they've made which is most likely a phishing website. I see a disadvantage if the websites that have used QR codes used link shorteners, it's best not to proceed with those. And you being not a fan of it and unaware of it, seems that you're not using it so it is an advantage for you.

As we enter the new year, we need to be cautious of these new scams. I know one way I can QR codes is when it's gateway to join a  group chat for investment opportunities or something I like. It's easy to get carried away by the promise of quick gains or the latest crypto coin trends.

However, we must be careful not to innocently join harmful groups. Even if a friend shares something that seems harmless but require scanning with the knowledge of quishing, I'm going to double-check the authenticity of the QR code and the person who sent it. Anyone can be a victim of scams, and it's better to be safe than sorry.

Let's be watchful of the group chats we join through scanning QR codes we scan. A little caution can go a long way in protecting ourselves from these latest scans this year.
That's another thing, when you're active with these crypto groups and random guys are giving you QR codes for you to scan and get a visit of it, it's best to ignore them. Nobody wants the best for you in that type of group and will just hand out information for you to earn more or earn freely.

QR phishing, also known as ‘quishing’

That's a new word I learnt today. I was aware of phishing and I was aware of people manipulating QR codes but didn't know that a term exists for this.
In my country, I have read in news that some people were quishing such that they sticked their own QR codes on top of QR codes in public places, local shops etc...
Thus, there were earning in thousands every day and so people are adviced to double check whom they are paying to avoid such fraudlent transactions.
The same goes with everything and we should double check everything we scan from our phones.
Yeah, that's another way of these cons. They do a swap QR code if it's about payments and that's the danger for the customers and the shop owners. And that solely focus on payments redirected to the cons wallets or banks. Whilst this, they're doing something else that might suck the entirety of your files, information, wallets, money, etc. So yeah, be careful.

....It has been advisable to verify a source to the QR code before proceeding to use it and to be careful of access granting permission from our devices. This is relatively to when we uses the public WiFi, we also standout to stake our device privacies while scamming invasion remains the watchwords.
That's right, it's also the same when using public wifi and it's best not to use any of them and so as these random QR codes, so don't be a curious one that keeps on scanning them not knowing the contents of it.
sr. member
Activity: 546
Merit: 265
January 03, 2025, 10:12:24 PM
#30
Seriously the Malwares threats in the internet has been too much and when we are being compromised of your Privacies and looses our digital valuables, we either don't know how in earth it happened, sometimes we think it could be the one person who we handed out device that is responsible for it while it is not. Could literally be that we are blindly responsible of it.

Let us appreciate the educational systems of todays that tends to highlight and exposes these varieties to how these malicious occurances could happen unknowingly to us and revealing how we can avoid them.

Actually this QR Scanning Code system is sometimes as a result of users just being lazy to personally go through the web link addresses by themselves probably because the alphabetical and numerical data of the file seems too lengthy to be inputted one after the other meanwhile the QR code help to log on faster.
This is as a case of being greedy and the eagerness to quick riches which leads to the hands of scammers.

The QR code actually works in a malware that when used the deceptive QR code, it compromises your device Privacies according to how vulnerable your device security features are.
There are certain protective security features that detects malicious domains which prevents the scammers project to intercept on your privacy.
If if your device security is vulnerable and you get on this stuff. Your data's would be liable to invade on and would automatically redirect your your operating system towards their malicious domains where they harvests your funds, collects data's or even redirect you to install their own corrupted apps and as much your device has the malicious app is how much they takes control of your device software.

It has been advisable to verify a source to the QR code before proceeding to use it and to be careful of access granting permission from our devices. This is relatively to when we uses the public WiFi, we also standout to stake our device privacies while scamming invasion remains the watchwords.
hero member
Activity: 2702
Merit: 716
Nothing lasts forever
January 03, 2025, 10:01:00 AM
#29
QR phishing, also known as ‘quishing’

That's a new word I learnt today. I was aware of phishing and I was aware of people manipulating QR codes but didn't know that a term exists for this.
In my country, I have read in news that some people were quishing such that they sticked their own QR codes on top of QR codes in public places, local shops etc...
Thus, there were earning in thousands every day and so people are adviced to double check whom they are paying to avoid such fraudlent transactions.
The same goes with everything and we should double check everything we scan from our phones.
full member
Activity: 266
Merit: 133
January 03, 2025, 06:13:23 AM
#28
As we enter the new year, we need to be cautious of these new scams. I know one way I can QR codes is when it's gateway to join a  group chat for investment opportunities or something I like. It's easy to get carried away by the promise of quick gains or the latest crypto coin trends.

However, we must be careful not to innocently join harmful groups. Even if a friend shares something that seems harmless but require scanning with the knowledge of quishing, I'm going to double-check the authenticity of the QR code and the person who sent it. Anyone can be a victim of scams, and it's better to be safe than sorry.

Let's be watchful of the group chats we join through scanning QR codes we scan. A little caution can go a long way in protecting ourselves from these latest scans this year.
legendary
Activity: 2520
Merit: 4355
Farewell o_e_l_e_o
January 03, 2025, 05:25:15 AM
#27
This is the first time I heard of Quishing. So, here's another newborn word.
This is a new term with me too.

What is quishing?
According to Wikipedia, it is a relatively new trend in online scam.
It is a new trend in 2023 and 2024 according to this report,l and others from [34-38] references cited by Wikipedia.
legendary
Activity: 2576
Merit: 1860
January 03, 2025, 05:17:14 AM
#26
This is the first time I heard of Quishing. So, here's another newborn word.

I don't know if this is available to all phones, but when I open my camera on a QR code, it indicates where it leads me. I've used this a handful of times to verify QR codes. But aside from this, is there a standard way to know what the QR is all about? We aren't necessarily asked to confirm that we're about to enter this and that site, for example, each time we scan QR's, right?

I'm not really a big fan of QR. Even in paying or depositing, I prefer the old manual version of making inputs. Perhaps I'm just used to the old and somehow inconvenient way of doing things, but it seems more secure. You're allowed to doublecheck and verify.
hero member
Activity: 3234
Merit: 775
🌀 Cosmic Casino
January 03, 2025, 05:13:58 AM
#25
However does this kind of QR, also present from some apps that are usable for example a camera effect app? Or something that normal user do and exploited by a hacker for getting some info such as private key?
Whenever we download an app and we agree to the terms that they have like the usage of our information and data, it's possible that the app itself might be able to use our camera or hear our voices. This is what google and facebook do to our devices. But as for getting direct usage for our camera just to scan their QRs and have some camera effect, I don't think that it's possible. And for a user to be forced or get exploited by a hacker to penetrate into our apps and devices to get important details like private keys or any files, they have to make us download their malware first or connect to their fake wifi connection.

This is a major threat that people can easily fall for because it is not easy to notice a malicious website or app from the QR code unless it is scan and by then it would have already been too late. Unfortunately, there is a boom in QR code now, even in leisure centers and train stations, they are there which makes it a very challenging situation.  One way to avoid this is to only scan QR codes from trusted sources and completely avoiding random ones. There should be other ways of protecting oneself from this kind of security threat which I'm willing to learn from others.
That's why everyone needs to be watchful with what they scan. Like those flyers and ads that says "scan for more info" they might be legit but who knows if some cons takes a swap of those ads with their ill intent to the victims.

Obviously, these cons would definitely take advantage of the whole thing as it is that the QR code scanner is now becoming very rampant and people are beginning to use it very much as a result of its ease and speed to connect with the payment gateway. People just like things of this nature that  does not stress them that much and mostly they do not really verify anything they just quickly use them because they hear it is a hot cake without taking time to see for themselves reviews about it.
And that is the reason why we need to be safe with our practices and don't be like those people that easily scan things that they see.
sr. member
Activity: 728
Merit: 421
January 03, 2025, 04:08:01 AM
#24
This is another sophisticated techniques scammers use to steal from their victims. Many people would easily fall into this because there is no way to verify through the QR code if what they are scanning is legit or fake as it directs them to the website or whatever they are in search of without any warning or sign for them to stop. I really do not scan QR codes from random sites except on recommendations from a reputable member or person who can vouch for such services to be real, legit and genuine before I scan any QR code. To be honest I barely use it for payment or purchase of anything except from the Crypto exchange directly which I am very much sure of or I got a direction from the staff of such organisation using the QR code for their services then I can conveniently use it otherwise I do not make the mistake of using it for some random website.
People who barely use it are pretty much safe and those who are just typing the words or links that they often visit. But the trend might go there that people will use QRs from time to time because it's quicker and more convenient for most and these cons are going to take advantage of it.

Obviously, these cons would definitely take advantage of the whole thing as it is that the QR code scanner is now becoming very rampant and people are beginning to use it very much as a result of its ease and speed to connect with the payment gateway. People just like things of this nature that  does not stress them that much and mostly they do not really verify anything they just quickly use them because they hear it is a hot cake without taking time to see for themselves reviews about it.
sr. member
Activity: 476
Merit: 307
January 03, 2025, 03:22:21 AM
#23
This is a major threat that people can easily fall for because it is not easy to notice a malicious website or app from the QR code unless it is scan and by then it would have already been too late. Unfortunately, there is a boom in QR code now, even in leisure centers and train stations, they are there which makes it a very challenging situation.  One way to avoid this is to only scan QR codes from trusted sources and completely avoiding random ones. There should be other ways of protecting oneself from this kind of security threat which I'm willing to learn from others.
legendary
Activity: 1106
Merit: 1337
Lightning network is good with small amount of BTC
January 03, 2025, 02:06:39 AM
#22
However does this kind of QR, also present from some apps that are usable for example a camera effect app? Or something that normal user do and exploited by a hacker for getting some info such as private key?
What I read about QR code scam is done when the scammer change the QR code to his own. This is common to those physical QR codes and not the digital ones. But if someone download a fake wallet, definitely the QR code belong to scammers. But as for a legit QR code to be changed to hackers code, it is not easy. Even QR code is safer than just copy and paste of addresses.
legendary
Activity: 2324
Merit: 1384
Fully Regulated Crypto Casino
January 02, 2025, 10:31:26 PM
#21
Wow thats a very long response to a lot of users. But I did appreciate your answer. I get it thats not gonna be easy to scam too as the hacker might need couple of of things needrd beforr succesfully infilitrated the account of yours. However does this kind of QR, also present from some apps that are usable for example a camera effect app? Or something that normal user do and exploited by a hacker for getting some info such as private key?
hero member
Activity: 3234
Merit: 775
🌀 Cosmic Casino
January 02, 2025, 08:24:31 PM
#20
If I asked of bitcoin address from people, they send the address not in QR code.

The only time I make use of QR code while doing something about bitcoin or other cryptocurrencies is when I am sending coins to myself using two devices. Although, the QR code can be saved and be used in the same device.

Another area I use QR code is not related to cryptocurrencies at all. It is when I want to check the authenticity of a problem that will require people to scam QR code to know if the product is original or fake.

QR code is safe to use for me.
This is fine if you are using it to yourself because you can check it out and the authenticity of where it is directing you upon scanning the QR code of your own wallet. And about checking the authenticity of a product, it's also true that this system is being used by those companies for their consumers to see the validity of the product that is bought by them. Seems you have no problem with it and you should be fine using QRs as long as you're aware of it and you have some good practice by using it.

scanning QR codes unless the one sent to me from someone or I find from which I trust I don't even take the risk of scanning anything, and with how sensible these new gadgets are now, just by using your camera close to a QR code, it will be detected, and you will be asked if you want to check the content, which I always reject. It's really easy to avoid such scams; that's for those vigilant enough.

In terms of QR code scams, where I'm very fearful, are those who use random websites to convert valuable and sensitive information into QR codes, which the website can store those information for later use.
If you don't know the source of the QR, you should be fearful and if you are someone that just random scans everything, you have to be careful.

I didn't know about Quishing but scam through QR codes is one of scam types.

QR Code Generator Scams
It can be a fake QR code generator or other things for scam with scammer addresses or links to visit phishing sites or download fake applications.
Quote
It’s safe to assume that some people prefer using QR Codes rather than wallet addresses simply because it’s quicker to do a QR Code scan using a mobile phone.

Due to this, some people resort to using “QR Code Generators” or “converters” to convert a wallet address to a usable QR Code.

How the scam works
  • The victim opens the fraudulent bitcoin address-to-QR code converter.
  • The victim enters his/her wallet address.
  • Instead of giving the victim the QR code of the wallet address he/she entered, the scammer instead displays a QR code of a different wallet address that the scammer owns
  • The victim then unintentionally sends funds to the scammer thinking that he/she’s sending the funds to his/her own wallet.

How to protect yourself
  • Always double-check if the service you’re using is actually giving you the correct and legitimate QR code.
The convenience is there upon using QR codes but the scammers/hackers are also taking advantage of it. So, if you are someone who is not aware of these scams that are circulating in the space, they're targeting you. But as long as you know how it works and you're always vigilant with the QRs that you are scanning then you'd probably be safe. Because one thing for these QRs is possibly can make you download automatically the contents that are tools for them to actually hack someone's device.

I never scan physical qr codes as they are very easy to replace wherever they are placed and I don't go to restaurants where menus are only accessible through scanning a code

I still scan qr codes from certain websites. For those to be changed the website needs to be compromised which effectively puts everything on it at risk.

Qr code swaps is more dangerous when executed, cause most people do not bother to inspect the url it leads them to, to check for any difference between that and the original, generally letting down their guard somewhat.
You're right, I am aware of these qr code swaps that happen mostly in these establishments where the robber swaps their qr for the payments of the customers. But this is pretty much the same as quishing IMO. I haven't been into restaurants that requires their customers to scan for the menus, that sucks and time consuming to be honest.

The scammers can do many things if they want to deceive their targets as they can pick the target randomly from what they get. This QR codes maybe is new for many people so they will not thinks much about that especially if they want to make a transaction using QR codes. That is why we must always be careful and not easily scan the QR codes for the suspicious transaction and investigate first before we decide.

We must reminds about this news to many people around us so they can still be careful when they want to transact with other parties. It is better not to scan the QR if we are not sure and use the transfer methods to avoids the mistake.
Yup, that's what we can do. To remind our families and friends and the community that we are in to be careful of such. Little did they know that the qr codes that they're scanning could lead to their potential losses and other troubles that they don't want to get in.

Just use an application which can show you the URL that is being scanned instead of simply navigating to it in the browser, and you will be able to mitigate almost all quishing attempts.

Also don't scan random QR codes just for fun, only scan stuff that you're actually expecting to scan. Just like you wouldn't click on any old link, you should scan any old QR code either.
I agree, don't just scan random qr codes for entertainment but I see this happen sometimes that there were people out of curiosity want to try it. And that's a good choice about scanning the QR to know what's in it, do you have any application in suggestion for that task?

I have read about quishing sometime ago. I don't think quishing is very common because, the number of people that uses QR code often isn't that massive, compare to those that just prefer to use a direct URL via their browsers, though I can admit that this technic is very helpful to scammers because it isn't that difficult to create and put online or printed on a paper shit.

I have seen several QR codes that are printed on paper, in most cases, with captions that are very attractive or convincing. Personally, I scan QR codes, but from popular products only. And I think one problem with QR is that it doesn't give a preview of the website it wants to take you to, which is why I prefer to scan popular products Instead, rather than just checking out everything with a QR code that comes my way
That's why if there are some apps that can be used in scanning those QRs revealing what's the link or app behind it will be useful but I don't know any nor used one. Waiting for some suggestions and we'll put it up on the OP for others to see it since not everyone will read everyone's reply here.

This is another sophisticated techniques scammers use to steal from their victims. Many people would easily fall into this because there is no way to verify through the QR code if what they are scanning is legit or fake as it directs them to the website or whatever they are in search of without any warning or sign for them to stop. I really do not scan QR codes from random sites except on recommendations from a reputable member or person who can vouch for such services to be real, legit and genuine before I scan any QR code. To be honest I barely use it for payment or purchase of anything except from the Crypto exchange directly which I am very much sure of or I got a direction from the staff of such organisation using the QR code for their services then I can conveniently use it otherwise I do not make the mistake of using it for some random website.
People who barely use it are pretty much safe and those who are just typing the words or links that they often visit. But the trend might go there that people will use QRs from time to time because it's quicker and more convenient for most and these cons are going to take advantage of it.

To be honest, i have noticed an increase of QR codes related to crypto popping up quite frequently in the last few months.
Before that it was usually someone shilling Pi, but now its all sort of stuff.
I assumed it was just referral hunting, but it might as well be a scam website
That's probably one start of it, any technique that's built within it is going to have some time to understand that they can do it also for harming others and stealing people's money. If it's just for referral hunting, that's annoying but it's way finer than of robbing people through it.

I see so it works like a normal phishing site too. The only difference is that this one is done via QR code scanning.  Well if were directed to a fake site just dont use it or explore around it. But is there a report that if you scan alone a QR and youll get scammed or robbed based on scanning or nah? Thats too much if its in only scanning were gonna be hack or scam.
I think the curiosity of someone that has been redirected to a fraud website through a QR will stick for a couple of seconds or minutes trying to explore around. And that's when the user is likely to get victimized by that con. You'll only get robbed or scammed unless you pursue to what they instruct to do based on the fake websites alone like signing up of keys/seeds or much worse if it's redirected to an automatic downloading files sharing website that contains a malware. So, there are still some steps before someone becomes a victim but hopefully none will be from here or from the other platforms.

Criminals have a way of exploiting any liphol in any development, and not only is cryptocurrency one of the most focus points of exploitation other financial activities too are sometimes victims of those criminals too like the bank account hack through information stolen from victims' phone, this have been around for a while now and QR code scanner and it development is no thought a possible exploitative means to hackers too which mean one can actually scam a virus inflicted QR codes and get device effected.

At this point we all need to be careful and should scan only codes from authorised dealers and not scan any random codes most especially when it comes from online third party services, I also have not scan a cryptocurrency address before and anytime I want to send a coin I copy the address directly and recheck to see before sending coins.
They always reinvent and try to use the innovation that's happening in the corner. That's why they upgrade and so as the technology and we as users and consumers, we also need to be aware of these trends even if it doesn't sound too techy for some but the majority are from normal to average type of users of these QR codes.

The severity of this phishing attack depends on the QR-code scanner (app) you are using.
Any decent app will easily recognize the valid URL but will not open it automatically. It will decode the image, display the URL (or whatever data it finds) in plain text and then ask you if you want to visit that link.
QR codes, as any other technology, are supposed to make our lives easier but we need to be careful when dealing with them. Just don’t scan random codes and if you do, make sure to decode it to see the data it stores in plain text.
Most of the QR codes that I have tried to scan before always directs me to the links that they are supposed to direct me and all of them opened automatically. So, maybe I'd test it out with some other qr code scanner that I haven't used. But I hope that the QR code scanner developers will make some features like this to protect their users too.

Any scam that happens with Fiat has its own equivalent in cryptocurrency. And as Bitcoin is already getting global adoption and recognition,these scams will continue to increase.

Quishing scams I learned is not new as even it happens in parking meters.

I don't scan QR codes for any payments. I can say that I am safe but I those who use QR codes and have to scan to make payments and are not aware of this are not. Those who we feel don't know about this should be informed.

Do not scan QR codes absentmindedly. And be vigilant when scanning a new QR code for the first time. If it doesn't feel right, stop the transaction.
Good for you if you don't typical scan qr codes. But at some point, you'd probably be sure to try it out when time permits or some transactions you have personally asks you to do so. And yet, as you've said, you also need to be careful about it.

Well, if someone sent me a qr code is I don't scan it with the app it requires to scan. I came across this kind of phishing on X (formerly twitter) where the scammer used qr code where it tells that you will earn money but if you scan the qr code is it will ask to send crypto to a wallet address with the amount that the scammer set. If I don't want to use the app is I use online qr code scanner to see what the qr code contain to make it safe.
Exactly, that's how it goes as it can be used for various techniques by these people that takes advantage of the people that don't know how their gimmicks are. Stay safe!

Sounds weird but yeah this is actually happens. I saw similar incidents here my local where QR codes that needs to scan for payment in local stores where changed, probably directly to scammer's payment method, it might sound stupid because they can expose their own info when the victims successfully sent a payment since some info like names are shown in the app after payment but they can just make a fake names and info on that.
Mostly, they are going to use some fake or dummy accounts for receiving it that have generated the fake QR code for payment but like you guys have mentioned, it's just one of the many ways these cons are using quishing for these harmful purposes they have.
legendary
Activity: 1554
Merit: 880
Wallet transaction notifier @txnNotifierBot
January 02, 2025, 06:41:21 PM
#19
Sounds weird but yeah this is actually happens. I saw similar incidents here my local where QR codes that needs to scan for payment in local stores where changed, probably directly to scammer's payment method, it might sound stupid because they can expose their own info when the victims successfully sent a payment since some info like names are shown in the app after payment but they can just make a fake names and info on that.
hero member
Activity: 2268
Merit: 669
Bitcoin Casino Est. 2013
January 02, 2025, 04:10:13 PM
#18
Well, if someone sent me a qr code is I don't scan it with the app it requires to scan. I came across this kind of phishing on X (formerly twitter) where the scammer used qr code where it tells that you will earn money but if you scan the qr code is it will ask to send crypto to a wallet address with the amount that the scammer set. If I don't want to use the app is I use online qr code scanner to see what the qr code contain to make it safe.
sr. member
Activity: 588
Merit: 273
January 02, 2025, 03:40:20 PM
#17
Any scam that happens with Fiat has its own equivalent in cryptocurrency. And as Bitcoin is already getting global adoption and recognition,these scams will continue to increase.

Quishing scams I learned is not new as even it happens in parking meters.

I don't scan QR codes for any payments. I can say that I am safe but I those who use QR codes and have to scan to make payments and are not aware of this are not. Those who we feel don't know about this should be informed.

Do not scan QR codes absentmindedly. And be vigilant when scanning a new QR code for the first time. If it doesn't feel right, stop the transaction.
legendary
Activity: 2772
Merit: 3114
Top Crypto Casino
January 02, 2025, 03:36:07 PM
#16
The severity of this phishing attack depends on the QR-code scanner (app) you are using.
Any decent app will easily recognize the valid URL but will not open it automatically. It will decode the image, display the URL (or whatever data it finds) in plain text and then ask you if you want to visit that link.
QR codes, as any other technology, are supposed to make our lives easier but we need to be careful when dealing with them. Just don’t scan random codes and if you do, make sure to decode it to see the data it stores in plain text.
hero member
Activity: 966
Merit: 519
January 02, 2025, 01:48:46 PM
#15
Criminals have a way of exploiting any liphol in any development, and not only is cryptocurrency one of the most focus points of exploitation other financial activities too are sometimes victims of those criminals too like the bank account hack through information stolen from victims' phone, this have been around for a while now and QR code scanner and it development is no thought a possible exploitative means to hackers too which mean one can actually scam a virus inflicted QR codes and get device effected.


At this point we all need to be careful and should scan only codes from authorised dealers and not scan any random codes most especially when it comes from online third party services, I also have not scan a cryptocurrency address before and anytime I want to send a coin I copy the address directly and recheck to see before sending coins.
legendary
Activity: 2324
Merit: 1384
Fully Regulated Crypto Casino
January 02, 2025, 12:42:05 PM
#14
Basically, it's about the fake content of the QR codes that might be used by the scammers/hackers that can land us into fake websites, fake exchanges, or make us download malware and other dangerous stuff that can steal our crypto.
I see so it works like a normal phishing site too. The only difference is that this one is done via QR code scanning.  Well if were directed to a fake site just dont use it or explore around it. But is there a report that if you scan alone a QR and youll get scammed or robbed based on scanning or nah? Thats too much if its in only scanning were gonna be hack or scam.
hero member
Activity: 2086
Merit: 761
Top-tier crypto casino and sportsbook
January 02, 2025, 12:34:08 PM
#13
To be honest, i have noticed an increase of QR codes related to crypto popping up quite frequently in the last few months.
Before that it was usually someone shilling Pi, but now its all sort of stuff.
I assumed it was just referral hunting, but it might as well be a scam website
sr. member
Activity: 728
Merit: 421
January 02, 2025, 11:43:15 AM
#12
This is another sophisticated techniques scammers use to steal from their victims. Many people would easily fall into this because there is no way to verify through the QR code if what they are scanning is legit or fake as it directs them to the website or whatever they are in search of without any warning or sign for them to stop. I really do not scan QR codes from random sites except on recommendations from a reputable member or person who can vouch for such services to be real, legit and genuine before I scan any QR code. To be honest I barely use it for payment or purchase of anything except from the Crypto exchange directly which I am very much sure of or I got a direction from the staff of such organisation using the QR code for their services then I can conveniently use it otherwise I do not make the mistake of using it for some random website.
full member
Activity: 266
Merit: 180
cout << "Bitcoin";
January 02, 2025, 07:17:57 AM
#11
Quishing or QR code phishing. While everyone is aware of phishing, most people here and even outside the forum should be aware of it. Be careful what you scan with QR codes, which are so convenient that they direct us straight to the website or the content that it might want us to download that we're not aware of what's in it.

~snip

Basically, it's about the fake content of the QR codes that might be used by the scammers/hackers that can land us into fake websites, fake exchanges, or make us download malware and other dangerous stuff that can steal our crypto. So, please bear in mind to be careful to what you usually scan in the internet or even in stores and products. Are there folks here who are a fan of scanning random QR codes? or even not random QRs. That's why I prefer not to scan most of it if it's related to finances and crypto matters.

I have read about quishing sometime ago. I don't think quishing is very common because, the number of people that uses QR code often isn't that massive, compare to those that just prefer to use a direct URL via their browsers, though I can admit that this technic is very helpful to scammers because it isn't that difficult to create and put online or printed on a paper shit.

I have seen several QR codes that are printed on paper, in most cases, with captions that are very attractive or convincing. Personally, I scan QR codes, but from popular products only. And I think one problem with QR is that it doesn't give a preview of the website it wants to take you to, which is why I prefer to scan popular products Instead, rather than just checking out everything with a QR code that comes my way
sr. member
Activity: 448
Merit: 354
January 02, 2025, 04:15:22 AM
#10
scanning QR codes unless the one sent to me from someone or I find from which I trust I don't even take the risk of scanning anything, and with how sensible these new gadgets are now, just by using your camera close to a QR code, it will be detected, and you will be asked if you want to check the content, which I always reject. It's really easy to avoid such scams; that's for those vigilant enough.

In terms of QR code scams, where I'm very fearful, are those who use random websites to convert valuable and sensitive information into QR codes, which the website can store those information for later use.
You are very careful with QR codes and that is smart. It is good that you know about possible dangers and take steps to keep yourself safe. Feature that lets cameras find QR codes automatically can be helpful but it also means you might accidentally open bad links. It is great that you are careful and do not open QR codes you do not know. It is also important to think about websites that store secret information in QR codes. When making QR codes especially for secret information it is important to use trustworthy websites and services. Being careful is best way to avoid QR code scams.
legendary
Activity: 1106
Merit: 1337
Lightning network is good with small amount of BTC
January 02, 2025, 03:35:35 AM
#9
Just use an application which can show you the URL that is being scanned instead of simply navigating to it in the browser, and you will be able to mitigate almost all quishing attempts.
Everywhere that I have scanned QR code, the information needed will be displayed if it is what that is important like for making payments. Ann example is the bitcoin address. If you scan it on any wallet, exchange or anywhere, you will then see the bitcoin address yourself. But the problem is that not all the QR code will also display the address someone here visible like blow the QR code which is the common location the address is displayed.

I have heard of other scam before but I have not heard of QR code scam before. It may be possible but I do not think we crypto users can be affected with QR code scam because how will the QR code be replaced easily?
legendary
Activity: 1568
Merit: 6660
bitcoincleanup.com / bitmixlist.org
January 02, 2025, 02:32:58 AM
#8
Basically, it's about the fake content of the QR codes that might be used by the scammers/hackers that can land us into fake websites, fake exchanges, or make us download malware and other dangerous stuff that can steal our crypto. So, please bear in mind to be careful to what you usually scan in the internet or even in stores and products. Are there folks here who are a fan of scanning random QR codes? or even not random QRs. That's why I prefer not to scan most of it if it's related to finances and crypto matters.

Just use an application which can show you the URL that is being scanned instead of simply navigating to it in the browser, and you will be able to mitigate almost all quishing attempts.

Also don't scan random QR codes just for fun, only scan stuff that you're actually expecting to scan. Just like you wouldn't click on any old link, you should scan any old QR code either.
hero member
Activity: 2912
Merit: 556
Enterapp Pre-Sale Live - bit.ly/3UrMCWI
January 02, 2025, 02:28:02 AM
#7
The scammers can do many things if they want to deceive their targets as they can pick the target randomly from what they get. This QR codes maybe is new for many people so they will not thinks much about that especially if they want to make a transaction using QR codes. That is why we must always be careful and not easily scan the QR codes for the suspicious transaction and investigate first before we decide.

We must reminds about this news to many people around us so they can still be careful when they want to transact with other parties. It is better not to scan the QR if we are not sure and use the transfer methods to avoids the mistake.
jr. member
Activity: 51
Merit: 16
January 02, 2025, 02:16:39 AM
#6
.

Qr code swaps is more dangerous when executed, cause most people do not bother to inspect the url it leads them to, to check for any difference between that and the original, generally letting down their guard somewhat.

So many people are ignorant of the following that pops up after the code is scanned and that's why it very dangerous. I could remember not long ago in school where a scholar was actually advertising a concert and some skill acquisition platform where he verbally told everyone about the skills and service that student would expect to see in what he was trying to pass information on and believe there was some interesting skills but the moment he mentioned the website to register was through a QR code scan of which he pasted a paper composing of just the QR code, so many students started being skeptical that their is no way they would scan a paper to actually visit a site and many were like what if the code leads to a site where there information can be access but the truth is so many wouldn't care and just Incase their fear was real then so many victim would be affected.
legendary
Activity: 2254
Merit: 2406
Playgram - The Telegram Casino
January 01, 2025, 11:30:49 PM
#5
I never scan physical qr codes as they are very easy to replace wherever they are placed and I don't go to restaurants where menus are only accessible through scanning a code

I still scan qr codes from certain websites. For those to be changed the website needs to be compromised which effectively puts everything on it at risk.

Qr code swaps is more dangerous when executed, cause most people do not bother to inspect the url it leads them to, to check for any difference between that and the original, generally letting down their guard somewhat.
sr. member
Activity: 966
Merit: 306
January 01, 2025, 09:05:27 PM
#4
I didn't know about Quishing but scam through QR codes is one of scam types.

QR Code Generator Scams
It can be a fake QR code generator or other things for scam with scammer addresses or links to visit phishing sites or download fake applications.
Quote
It’s safe to assume that some people prefer using QR Codes rather than wallet addresses simply because it’s quicker to do a QR Code scan using a mobile phone.

Due to this, some people resort to using “QR Code Generators” or “converters” to convert a wallet address to a usable QR Code.

How the scam works
  • The victim opens the fraudulent bitcoin address-to-QR code converter.
  • The victim enters his/her wallet address.
  • Instead of giving the victim the QR code of the wallet address he/she entered, the scammer instead displays a QR code of a different wallet address that the scammer owns
  • The victim then unintentionally sends funds to the scammer thinking that he/she’s sending the funds to his/her own wallet.

How to protect yourself
  • Always double-check if the service you’re using is actually giving you the correct and legitimate QR code.
sr. member
Activity: 1414
Merit: 272
Get $2100 deposit bonuses & 60 FS
January 01, 2025, 08:53:44 PM
#3
scanning QR codes unless the one sent to me from someone or I find from which I trust I don't even take the risk of scanning anything, and with how sensible these new gadgets are now, just by using your camera close to a QR code, it will be detected, and you will be asked if you want to check the content, which I always reject. It's really easy to avoid such scams; that's for those vigilant enough.

In terms of QR code scams, where I'm very fearful, are those who use random websites to convert valuable and sensitive information into QR codes, which the website can store those information for later use.
legendary
Activity: 1512
Merit: 4795
Leading Crypto Sports Betting & Casino Platform
January 01, 2025, 08:15:53 PM
#2
Are there folks here who are a fan of scanning random QR codes? or even not random QRs. That's why I prefer not to scan most of it if it's related to finances and crypto matters.
If I asked of bitcoin address from people, they send the address not in QR code.

The only time I make use of QR code while doing something about bitcoin or other cryptocurrencies is when I am sending coins to myself using two devices. Although, the QR code can be saved and be used in the same device.

Another area I use QR code is not related to cryptocurrencies at all. It is when I want to check the authenticity of a problem that will require people to scam QR code to know if the product is original or fake.

QR code is safe to use for me.
hero member
Activity: 3234
Merit: 775
🌀 Cosmic Casino
January 01, 2025, 08:05:59 PM
#1
Quishing or QR code phishing. While everyone is aware of phishing, most people here and even outside the forum should be aware of it. Be careful what you scan with QR codes, which are so convenient that they direct us straight to the website or the content that it might want us to download that we're not aware of what's in it.

So, here's a brief meaning of Quishing.

What is quishing?
QR phishing, also known as ‘quishing,’ is a cybercrime that exploits the popularity of QR codes. In this scam, cybercriminals create malicious QR codes that, when scanned, lead to fraudulent websites or prompt downloads of harmful software. As people increasingly use QR codes for various purposes, such as accessing menus or making payments, they may unknowingly scan these deceptive codes, putting their personal information at risk.

This behavior was highlighted during the 2022 Super Bowl when Coinbase’s innovative QR code advertisement led to a significant increase in app downloads. However, it also raised concerns in the cybersecurity community, especially in light of recent Crypto QR scams where scammers used QR codes to manipulate victims into withdrawing money from their accounts.

The term “quishing” combines QR codes and phishing, indicating a method where malicious actors create fake QR codes to direct users to spoofed sites, steal information, or install malware on their devices. The goal is to deceive individuals into believing they are interacting with a harmless or necessary QR code, while the true intent is to access and steal personal and financial information.

Basically, it's about the fake content of the QR codes that might be used by the scammers/hackers that can land us into fake websites, fake exchanges, or make us download malware and other dangerous stuff that can steal our crypto. So, please bear in mind to be careful to what you usually scan in the internet or even in stores and products. Are there folks here who are a fan of scanning random QR codes? or even not random QRs. That's why I prefer not to scan most of it if it's related to finances and crypto matters.
Jump to: