QR Code Fraud: How to Detect and Avoid It

QR codes – originally designed for quick access – often contain links to websites. But be careful: a single scan can be dangerous.

What is a QR code?

A QR code can contain up to 4,000 characters – much more than just a simple link. It may point to websites with harmful files (e.g., .exe, APK, or JAR) or even automatically perform actions on your device.

Particularly insidious: Some codes secretly add contact information or send emails in the background – sometimes even in your name.

Rule No. 1: Only scan QR codes if you absolutely trust the source!

How to recognize manipulated QR codes?

  • A sticker placed over the original, e.g., on menus or posters.
  • Fake QR codes on websites – especially during online orders from "copycat" shops.
  • QR codes in spam emails or dubious sweepstakes and surveys.
Rule No. 2: Always check the destination URL before proceeding – if it looks suspicious or deviates from the original, cancel immediately.

Dangers on social media

Many QR codes circulate on social media from influencers or questionable sources – these often collect your personal data or use tracking scripts.

Rule No. 3: Never trust a QR code on social networks, even if it looks "legit."

What to do if you suspect something?

  1. Immediately change all passwords, especially for online banking or payment services.
  2. Contact your bank to stop suspicious transactions.
  3. Report the incident to the location (e.g., restaurant or shop) where the code was placed.
Rule No. 4: The faster you act, the less damage you'll suffer.

Additional tips

Watch out for signs of identity theft: strange emails, unexplained bills, or unusual login attempts. Activate two-factor authentication (2FA) everywhere.