Watch out for cryptocurrency QR code generators, they're almost all fake!

franky1

legendary

Activity: 4410

Merit: 4766

Quote from: Jawhead999 on February 27, 2022, 09:07:09 PM

Due to my skepticism I never use any QR code when it comes to exchanges or wallet, it's better to copy-paste the address and triple check it.

some people like to 'air gap' their exchange deposit away from their actual cold store.
that way they are not using the same screen/system as they are when logging into websites.

EG phone app for own personal stash and normal pc to log into services
thus copying/pasting is not possible, and writing out address is inconvenient especially if you make a spelling mistake, you can end up sending funds elsewhere

the main thing is dont just scan a QR code and send funds to it instantly., instead check what you scan matches the address of the service you want to deposit to.

also dont just look at the first 8 characters
for instance bc1q is pretty much always going to be in segwit addresses and then its pretty easy for someone to 'vanity gen' many addresses that contain the same next 4 characters

so look at the whole address and make sure they look the same (usually better to start at the right side of the address rather then the left side) when comparing

OgNasty

donator

Activity: 4760

Merit: 4323

Leading Crypto Sports Betting & Casino Platform

Quote from: fcode on February 26, 2022, 11:34:57 PM

Why is no one talking about all the malicious QRcode generators? They come up as top results in major search engines. Most are scams. WTF

I think common sense is probably the reason for this. Don't let anyone have your private keys or use public keys that are generated for you by a third party. This should be a no brainer. You can generate your own QR code using your public key yourself, or I'm sure there are generators out there that provide you with a QR code for payment without needing to be the ones to have access to the private key.

For example, blockchain.com provides you with a QR code for any address automatically just by looking up the address. There is no compromise of your security to use such a QR code for payments. You can also easily check to make sure the QR code is for your address by just scanning it.

https://www.blockchain.com/btc/address/168WXhArv7Fasqvi2xm5MQMfLhG18jifMe

In short, it should be common sense to anyone not to get your Bitcoin keys from someone else (some exceptions like physical Bitcoin wallets, but you shouldn't load them either) and I think that's why people are out warning people not to use malicious QR code generators. Additionally, people shouldn't have their Bitcoin private keys posted publicly, but I don't think we need to have a public discussion about that either.

e_abrams

jr. member

Activity: 86

Merit: 1

I confess I did not even know they existed. I guess I was naive. Thank you for the heads up though, I will certainly be on the lookout now!

taufik123

legendary

Activity: 2716

Merit: 1855

Rollbit.com | #1 Solana Casino

if it is considered risky, it is better to avoid similar QR Code Generator applications. Moreover, QR codes have been provided by many exchanges for wallet addresses or wallet applications such as Trustwallet, ImToken, Safepal already provide QR codes without having to create them again.
Don't take risks, take advantage of what's already there and that's enough. If you don't want to use a QR code, just copy and paste the address and check periodically to see if it's correct.

SFR10

legendary

Activity: 2968

Merit: 3406

Crypto Swap Exchange

Quote from: fcode on February 26, 2022, 11:34:57 PM

Why is no one talking about all the malicious QRcode generators? They come up as top results in major search engines. Most are scams. WTF

This question would've made more sense a decade ago when only a select group of wallets were generating it, but nowadays, almost all of the wallets already provide it ^{[apart from other sources (e.g. explorers and etc...)]}.

It's worth noting that one of the QR code warnings that @Jawhead999 posted, has been reported twice ^{[2018 and 2021]}, but for some reason, their registrar has not done anything yet ^{[you should blame them instead]}.

FatFork

legendary

Activity: 1624

Merit: 2594

Top Crypto Casino

Quote from: fcode on February 26, 2022, 11:34:57 PM

Why is no one talking about all the malicious QRcode generators? They come up as top results in major search engines. Most are scams. WTF

I don't have detailed research on the subject, but I doubt most online QR code generators are scams as you claim. Can you give some examples?
Besides, isn't that something that can easily be verified? After generating the QR code, scan it yourself and see where it takes you.

If you find something malicious, you can even open a scam accusation on this forum to warn other members about that site.

Wexnident

hero member

Activity: 2702

Merit: 672

I don't request loans~

Well, you don't exactly need to use them? Pretty sure wallet addresses are enough and heck, much safer to use than generating a qr code. Plus, it has a much bigger guarantee in actually checking if it's correct since i don't think there's a way to see if the QR code indeed leads to that specific wallet. Plus, isn't it a hassle to even open up one to generate the code instead of just, well, sending the wallet address? That's pretty straightforward. And afaik, most centralized exchanges have their own QR codes generated by the site themselves, so no worries there, but if it was other than that, then yea, might be better to just use the wallet address itself.

The Cryptovator

legendary

Activity: 2394

Merit: 2223

Signature space for rent

I am not getting why we need to generate QR codes for cryptocurrency? I never use that nor do I need to use it. Because almost all wallets and exchanges are giving facilities of QR code. So no meaning search it on Google and generate a new one from there. On the other hand, popping up on Google search doesn't prove the legitimacy of a program or software. So don't use Google search for every and each need.

yazher

hero member

Activity: 2268

Merit: 588

You own the pen

Quote from: OmegaStarScream on February 27, 2022, 01:16:25 AM

Why would anyone need to use such a thing in the first place though? Exchanges, wallets, and block explorers already provide that, you don't need to use a third-party service for that.

This is legit because I almost posted a tutorial regarding QR code generators but turned out to be generating other wallet addresses rather than the wallet I put in the box. But when I saw that exchanges already provide such service, I forgot to warn everyone since my goal is to provide them convenience regarding their wallet QR code.

Maybe they don't know or didn't see that they can create QR codes in their exchanges, that's why they used such malicious service that turned out to be scam.

Jawhead999

legendary

Activity: 1834

Merit: 1208

Quote from: fcode on February 26, 2022, 11:34:57 PM

Why is no one talking about all the malicious QRcode generators?

What does with those below thread then? You said you've use search engine, but you can't use search engine to find old discussion about QR code scam, how shame it is.

1. {Warning}: Fake Bitcoin QR Code Generators
2. [Warning] Bitcoin QR code maker
3. QR Code replacement scam
4. [Alert! Alert] Bitcoin QR Generator” lead to scam websites.

Due to my skepticism I never use any QR code when it comes to exchanges or wallet, it's better to copy-paste the address and triple check it.

GreatArkansas

legendary

Activity: 2506

Merit: 1394

Quote from: davis196 on February 27, 2022, 01:34:33 AM

Can you elaborate more on this?Why would anybody search in Google or Bing for a QR code generator?
(....)

Some people are using QR codes to generate receiving address to their wallet because QR code these days is the best way to use other than copying/pasting/typing all of your Bitcoin address, QR code also will help that your address is accurate.

That's why there is a lot of Bitcoin wallet these days that already have QR code for receiving address so people can use them to receive Bitcoin without giving their Bitcoin address, just scan and send.

So, in this case, some people could use Google and search "QR GENERATOR" then if they will paste their Bitcoin address, then that QR GENERATE site could change the output of QR, they could change with them so that's how it became fake.

livingfree

hero member

Activity: 2884

Merit: 579

Hire Bitcointalk Camp. Manager @ r7promotions.com

Quote from: vv181 on February 27, 2022, 05:46:34 PM

Quote from: livingfree on February 27, 2022, 04:54:11 PM

Quote from: fcode on February 26, 2022, 11:34:57 PM

Why is no one talking about all the malicious QRcode generators? They come up as top results in major search engines. Most are scams. WTF

What's with that?

Like you're going to scan it and you'll get free money from them?

Care to explain more about it? Most of the scams really are in search engines' first results, there's a note that they've been placed as ads and that's for the intention of targeting people that are specifically searching for that thing.

I don't understand why there's a QR code generator and what's purpose of it. Usually, we're transacting more with the addresses and copy-pasting it from here to another.

QR code generator site mainly convert your text/URL/address or anything into a QR code. It comes in handy for some purpose like plainly showing a bitcoin donation address, so some people can just scan the QR code instead of typing it one by one. Or like making use of it for cold storage purposes.

While knowing the QR code being used for those purposes, some hacker is making a malicious generator site that can alter the bitcoin/altcoin address, thus making the generated QR code are infected.

Thanks.

I understand it now but does that make sense if you get those qr codes from unknown websites that you don't really website?

I think that it all goes now to us, individuals. If there's no need to visit a website such as this qr generator, it's better to be safe and don't visit them at all.

Luqman

sr. member

Activity: 826

Merit: 263

Be careful when you are going to download or use applications from google play or another third party. Because there are so many fake applications that you may find. Not only the QR generator but also some other applications such as fake TrustWallet and others.
It is better to use a QR code from the platform itself if there is any.
Or, if you really need it, why don't you get them from the official one?
Btw, although we are using such a QR scanner, it is better for us to double check the wallets or data that we want to use or submit.This is to avoid the fake information

dkbit98

legendary

Activity: 2212

Merit: 7064

Quote from: fcode on February 26, 2022, 11:34:57 PM

Why is no one talking about all the malicious QRcode generators? They come up as top results in major search engines. Most are scams. WTF

We are talking about QR generators, you just don't knw where to look, and they are not all scam and malware at all.
I was personally comparing QR codes with NFC in one of my topics, and I know few open source software working just fine for reading and generating QR codes, but you can also use Electrum wallet for generating BTC addresses.
QR Workshop or Zint can be used for windows, and CoBang for Linux operating system, they are all open source software.

vv181

legendary

Activity: 1932

Merit: 1273

Quote from: livingfree on February 27, 2022, 04:54:11 PM

Quote from: fcode on February 26, 2022, 11:34:57 PM

Why is no one talking about all the malicious QRcode generators? They come up as top results in major search engines. Most are scams. WTF

What's with that?

Like you're going to scan it and you'll get free money from them?

Care to explain more about it? Most of the scams really are in search engines' first results, there's a note that they've been placed as ads and that's for the intention of targeting people that are specifically searching for that thing.

I don't understand why there's a QR code generator and what's purpose of it. Usually, we're transacting more with the addresses and copy-pasting it from here to another.

QR code generator site mainly convert your text/URL/address or anything into a QR code. It comes in handy for some purpose like plainly showing a bitcoin donation address, so some people can just scan the QR code instead of typing it one by one. Or like making use of it for cold storage purposes.

While knowing the QR code being used for those purposes, some hacker is making a malicious generator site that can alter the bitcoin/altcoin address, thus making the generated QR code are infected.

livingfree

hero member

Activity: 2884

Merit: 579

Hire Bitcointalk Camp. Manager @ r7promotions.com

Quote from: fcode on February 26, 2022, 11:34:57 PM

Why is no one talking about all the malicious QRcode generators? They come up as top results in major search engines. Most are scams. WTF

What's with that?

Like you're going to scan it and you'll get free money from them?

Care to explain more about it? Most of the scams really are in search engines' first results, there's a note that they've been placed as ads and that's for the intention of targeting people that are specifically searching for that thing.

I don't understand why there's a QR code generator and what's purpose of it. Usually, we're transacting more with the addresses and copy-pasting it from here to another.

Bitcoin_Arena

copper member

Activity: 2114

Merit: 1814

฿itcoin for all, All for ฿itcoin.

Quote from: fcode on February 26, 2022, 11:34:57 PM

Why is no one talking about all the malicious QRcode generators?

Why are you searching them up in the first place? You don't need them at all.

Most wallets and exchange apps have an inbuilt feature where you can generate QR codes for addresses and also scan them, so I don't understand why you look for some random QR code generator or scanner off google.

davis196

hero member

Activity: 3150

Merit: 937

Can you elaborate more on this?Why would anybody search in Google or Bing for a QR code generator?
This doesn't make any sense.
I usually don't use QR codes,unless I'm required by some third party service,but I would never use a QR code to send or receive BTC or any altcoin.Wallet addresses are way better than QR codes,but you have to be careful when copy pasting the address characters.
I did a google search about this topic.Do you suggest that the websites bitcoinqrcodemaker.com,qr-code-generator.com and gobitcoin.io are scams?Maybe you are right.

OmegaStarScream

staff

Activity: 3500

Merit: 6152

Why would anyone need to use such a thing in the first place though? Exchanges, wallets, and block explorers already provide that, you don't need to use a third-party service for that.

Anonylz

hero member

Activity: 2562

Merit: 577

I think that is something the search engine should look into, if there are fake among good ones coming up at the top of a search then the search engine must be aware of this and do something (if they can) to prevent people from falling victim of this fake qr code.

fcode

full member

Activity: 170

Merit: 100

Why is no one talking about all the malicious QRcode generators? They come up as top results in major search engines. Most are scams. WTF

Topic: Watch out for cryptocurrency QR code generators, they're almost all fake! (Read 189 times)