Beware of the Dangers of Quishing on QR Codes, Here’s How to Recognize Fraud
Important Warning about Using QR Codes
In the current digital era, the use of QR codes is increasingly common in various daily activities. Starting from payment transactions to accessing public services, QR codes are a very practical tool. However, behind this practicality, there are risks that need to be considered. One of the main threats is the existence of fake QR codes that can be used to commit fraud or hacking.
What is Quishing?
Quishing is a cyber fraud method that uses QR codes as a tool to direct victims to malicious websites or fake payment mechanisms. According to Pratama Persadha, General Chair of the Communication & Information System Security Research Center (CISSReC) Cyber ​​Security Research Institute, simple technology such as QR codes are now being used by cybercriminals in unsafe ways.
“QR codes can store data such as links, text or other information in graphic form. When we scan them, a link (URL) will appear. If the URL leads to a malicious site or a fake payment mechanism, then scanning alone is enough to trigger a redirect to a phishing page or direct payment to the perpetrator’s account,” explained Pratama.
Signs of Risky QR Codes
Even though it’s not easy to distinguish just through images, there are several indicators that can help assess the security of a QR code before or after it is scanned. Here are some tips that can be done:
Check the source or context
If the QR code comes from an unknown source, such as a random brochure, email or SMS from an unknown sender, or a sticker stuck in a public place, you should be alert. Many cases of quishing are discovered from fake QR codes posted in public locations.Pay attention to the web address
After scanning the QR code, make sure the web address that appears is truly official. If the URL looks strange such as an inappropriate domain, lots of numbers, random letters, or uses an unfamiliar sub-domain, avoid entering personal or financial data.Avoid entering sensitive data
Don’t directly enter sensitive data such as passwords, card information, or payment details unless you are sure the site is official. If possible, access official sites manually, for example by typing the site address in the browser rather than following the link from the QR.Use a scanner app with security mechanisms
Choose a QR scanner application that has security features. For example, applications that can warn you if a URL is suspicious, or that show a preview of the domain before opening the page. While not all scanners have this feature, using a trusted scanner can help prevent redirects to malicious sites.Implement general cybersecurity practices
Make sure your phone and browser are always up to date. Use two-factor authentication (2FA) whenever possible, and avoid scanning QRs from unknown sources or unexpectedly asking for sensitive information.
Conclusion
Using QR codes is very useful in everyday life, but you still need to be careful. By paying attention to the source, checking the web address, and using a safe scanner application, we can better protect ourselves from the threat of quishing. Always remember that cybersecurity must be a top priority in every digital interaction.
