--- title: The Dark Side of QR Codes description: The modern day era is constantly changing and we are increasingly integrating technology into our everyday lives to make daily tasks more easier and time efficient. Gone are the days of manually typing website addresses into browsers, thanks to QR Codes a contactless solution to scan codes with a smart phone, tablet or computer to access a specific websites, information and applications. image: https://csacyber.com/hubfs/qr-code.jpg --- [Skip to content](https://csacyber.com/blog/the-dark-side-of-qr-codes#main-content) [![CSA Cyber - Cyber Security Solutions to Protect your People](https://csacyber.com/hs-fs/hubfs/CSA%20Cyber%20Logo%20FNL_Full%20Logo.png?width=300&height=108&name=CSA%20Cyber%20Logo%20FNL_Full%20Logo.png "CSA Cyber - Cyber Security Solutions to Protect your People")](https://csacyber.com/) - Services - [Offensive Security Services](https://csacyber.com/offensive-security-services) - [Penetration Testing](https://csacyber.com/penetration-testing) - [Red Teaming and attack simulations](https://csacyber.com/offensive-security-services#red-teaming) - [Continuous testing](https://csacyber.com/offensive-security-services#continuous-assurance) - [Managed offensive security](https://csacyber.com/offensive-security-services#managed-offensive) - [Consultancy Services](https://csacyber.com/cyber-consultancy-services) - [Frameworks & assessments](https://csacyber.com/cyber-consultancy-services/frameworks-and-assessments) - [Data protection](https://csacyber.com/cyber-consultancy-services#data-protection) - [Virtual leadership](https://csacyber.com/cyber-consultancy-services#virtual-leadership) - [Technical security consulting](https://csacyber.com/cyber-consultancy-services#technical-consultancy) - [Governance, Risk & Compliance (GRC)](https://csacyber.com/cyber-consultancy-services/governance-risk-and-compliance-services) - [Extended Managed Security Services](https://csacyber.com/extended-managed-security-services) - [Microsoft Sentinel SIEM](https://csacyber.com/extended-managed-security-services#microsoft-sentinel) - [SOC services](https://csacyber.com/extended-managed-security-services#soc-services) - [SentinelOne Endpoint Detection & Response (EDR)](https://csacyber.com/extended-managed-security-services#cyber-helpdesk) - [Incident Response Services](https://csacyber.com/incident-response-services) - [Emergency Incident Response](https://csacyber.com/urgent/emergency-incident-response) - [Incident Response Retainer](https://csacyber.com/incident-response-services) - [Cyber Incident Readiness & Response Planning](https://csacyber.com/incident-response-services) - [Tabletop Exercises & Live-Range Engagements](https://csacyber.com/incident-response-services) - [Specialist Security Services](https://csacyber.com/specialist-services) - [AI Security](https://csacyber.com/cyber-services-for-ai) - [Operational Technology (OT)](https://csacyber.com/specialist-services#operational-technology) - [Cyber security for Private Equity](https://csacyber.com/specialist-services#mergers-and-acquisitions) - [Cyber training and education](https://csacyber.com/specialist-services#training-and-education) - [Virtual leadership](https://csacyber.com/specialist-services#leadership) - [Cyber Technologies](https://csacyber.com/cyber-technologies) - [SentinelOne Endpoint Detection & Response (EDR)](https://csacyber.com/cyber-technologies#sentinelone) - [AppGuard Endpoint & Server Zero Trust Protection](https://csacyber.com/cyber-technologies#appguard) - [Qualys Vulnerability Management as a Service (VMaaS)](https://csacyber.com/cyber-technologies#qualys-vmaas) - [Lookout Mobile Device Protection](https://csacyber.com/cyber-technologies#lookout) - [ThreatER DNS Protection](https://csacyber.com/cyber-technologies#threater-dns) - [Cyber Security Awareness & Training platform](https://csacyber.com/cyber-technologies#boxphish) - [About](https://csacyber.com/about-us) - [Careers](https://csacyber.com/careers) - [Certifications](https://csacyber.com/certifications-and-awards) - [Blog](https://csacyber.com/blog) - [Support Centre](https://csacyber.com/support) - Resources - [Case Studies](https://csacyber.com/case-studies) - [Downloads & Reports](https://csacyber.com/downloads-and-reports) - [Webinars](https://csacyber.com/webinars) - [Partners](https://csacyber.com/partners) - [Cyber Bundles (IT MSPs)](https://csacyber.com/cyber-bundles) - [Contact](https://csacyber.com/contact-us) - Search Search Search June 2, 2023 6 min read time # The Dark Side of QR Codes ![Sarah Lane](https://app.hubspot.com/settings/avatar/d41d8cd98f00b204e9800998ecf8427e) [Written by: Sarah Lane -](https://csacyber.com/blog/author/sarah-lane) [Article](https://csacyber.com/blog/tag/article), [Security Operations](https://csacyber.com/blog/tag/security-operations) ![](https://csacyber.com/hubfs/qr-code.jpg) ### Executive Summary The modern day era is constantly changing and we are increasingly integrating technology into our everyday lives to make daily tasks more easier and time efficient. Gone are the days of manually typing website addresses into browsers, thanks to QR Codes a contactless solution to scan codes with a smart phone, tablet or computer to access a specific websites, information and applications. QR codes (Quick Response code) are not a new technology, originally designed in 1994 to efficiently scan and track component parts for manufacturing by the Japanese company Denso Wave \[2\]. In recent years QR codes have become increasing popular, in 2022 a total of 6,825,842 generated QR codes was scanned internationally an 433% increase compared to statistics recorded in 2021 \[1\]. Multiple industries have creatively used QR Codes for contactless restaurant menus, parking meters, transportation for trains and buses, Guest Wi-Fi, checking into venues, trackable post and delivery, advertisements, surveys and contactless payments \[3\]. Most notably an increase during the Covid pandemic to prevent the spread of the Covid infection from touching physical surfaces, QR codes have provided a contactless solution \[4\]. The big question is are QR Codes Safe? QR codes are generally safe however the increase in the popularity of QR Code usage has led to a new market for threat actors to exploit, unsuspecting victims are facing scams for spoofed QR Codes that link to phishing websites. The malicious websites can put victims at considerable risk of entering sensitive data, downloading drive by software that can be downloaded onto the device to harvest data, creating a back door for attackers to access and financial loss when providing bank details. Therefore the QR code is only as safe as the website linked \[2\]. ### The Modus Operandi A QR Code is a unique generated combination of black and white squares presented on a two dimensional grid that is generated cost free by an individual or company for an intended purpose such as a website link or embedded information \[1\]. The codes can be scanned by QR code readers which are already implemented into Android and IOS cameras for smart phones, tablets and available from the Windows store for computers with webcams. There are also many third party apps available from the google play store and Apple store \[2\]. There are also different types of QR Codes with the most popular being the dynamic QR code; this is a trackable code that can contain a lot of data and be changed multiple times with no need to generate a new code. This is ideal for menus, advertisements and transportations time/dates. A Static QR Code can also contain a lot of information however this cannot be changed once generated, a new code will have to be generated for new information to be inputted. This is ideal for linking to websites, contactless payments, guest Wi-Fi and trackable postage \[1\]. Now that we understand how QR codes work and their intended purpose, what kind of threats can QR code victims encounter? A popular tactic used byscammers is placing fake QR codes on parking meters to be used as a quick payment method, the QR code will redirect to a phishing website where the unexpecting victims can then enter sensitive information such as their name and card payment details. Not only has the money gone directly to the threat actors but the victim will also face a car parking fine \[5\]. In 2021 the BBB (Better Business Bureau) reported an increase in emails, direct messages on social media, text messages, flyers and letters containing QR Codes. A student was sent a letter regarding student finance, the letter contained a QR Code that directed to a legitimate .gov website however, once the student rang the phone number within the letter the scammers received payment. The legitimate QR Code made the letter appear genuine \[6\]. Another technology that has also increased in popularity is Cryptocurrency, threat actors can use crypto to make transactions that are pseudonymous. This means threat actors do not have to link any personal information or create an account only an identifier to link to a wallet is required, which makes it more difficult to track transactions \[7\]. The recent MR Beast Token Cryptocurrency Scam where victims were encouraged to access a phishing website to claim 10,000 BST a form of Cryptocurrency, were encouraged to connect their crypto wallet via scanning a QR Code. A processing fee required a small amount of the victims cryptocurrency and personal information such as email addresses and phone numbers \[8\]. ### Why does this Matter? The main motivator for threat actors regarding QR code scams is to harvest sensitive data for identify theft, personal and financial gain, this can cause victims a lot of financial loss leading to unmanageable debt, time wasting and stress issues. In 2022 the UK Finance reported over £1.2 billion stolen through fraud, that’s £2,300 every minute, 78% of APP Fraud cases (Authorised Push Payment Fraud) started online, 2% from emails and 18% which represented financial fraud over the telephone \[9\]. ### How to Protect Yourself The QR codes can be only as safe as the website the codes redirects to so here are steps that will help in mitigating the risk. **Think before you scan and question if the code is genuine:** How did you find or receive the QR Code? Is the sender or website legitimate? **Always verify the source:** If you are unsure the QR is safe is it is best practise not to scan. **Don’t install third party QR Code Reader apps unless you are sure they are genuine:** If you have a device with a QR Code built into the camera there is no need to install additional apps and the integrated software will be safer. **Always check the URL before being directed to the website:** Most built in apps will display the website and alert if the website is suspected to be suspicious \[1\]. **Never input sensitive data into a website unless sure the website is genuine:** Install Anti-Virus protection that offers a QR Code Scanner feature to check phishing scams, forced app downloads and phishing links. **Don’t scan QR Codes from strangers or websites that promise investments and gifts:** Don’t trust websites with short URL’s that could be hiding an malicious URL \[10\]. **Use Two Factor Authentication:** Add an additional layer of security over your password to prevent attackers gaining access. **Install a VPN (Virtual Private Network) when surfing the internet:** Keep your activity anonymous from threat actors and implement a password manager to protect your password. The manager can also identify fake websites and will not autofill your details \[11\]. ### Conclusion We now understand what QR Codes are, how they work, the types of attacks and how to mitigate the risks of rogue QR Codes. The main purpose highlighted in this blog is not to scare anyone away from using QR Codes because the technology is a very powerful tool designed to make life easier. Following the mitigation steps above can dramatically improve the chances of not falling prey to an attack and staying informed about developing technology can prevent any further attacks. Remember think before you scan. ### References \[1\] [https://www.einfochips.com/blog/exploring-qr-codes-how-they-work-and-risks-of-phishing-attacks/](https://www.einfochips.com/blog/exploring-qr-codes-how-they-work-and-risks-of-phishing-attacks/) \[2\] [https://www.avast.com/c-what-is-qr-code-how-to-scan#:~:text=A%20QR%20code%20(short%20for](https://www.avast.com/c-what-is-qr-code-how-to-scan#:~:text=A%20QR%20code%20\(short%20for) \[3\] [https://mention.com/en/blog/creative-ways-to-use-qr-codes/](https://mention.com/en/blog/creative-ways-to-use-qr-codes/) \[4\] [https://www.dxglobal.com/ideas/the-rise-of-qr-codes-during-covid-19/](https://www.dxglobal.com/ideas/the-rise-of-qr-codes-during-covid-19/) \[5\] [https://www.iow.gov.uk/news/Be-vigilant-of-potential-parking-scams](https://www.iow.gov.uk/news/Be-vigilant-of-potential-parking-scams) \[6\] [https://www.bbb.org/article/scams/24636-bbb-scam-alert-watch-out-for-fraudulent-qr-codes](https://www.bbb.org/article/scams/24636-bbb-scam-alert-watch-out-for-fraudulent-qr-codes) \[7\] [https://www.fool.com/investing/stock-market/market-sectors/financials/cryptocurrency-stocks/benefits-of-cryptocurrency/](https://www.fool.com/investing/stock-market/market-sectors/financials/cryptocurrency-stocks/benefits-of-cryptocurrency/) \[8\] [https://www.myantispyware.com/author/patrik](https://www.myantispyware.com/author/patrik) and [http://www.facebook.com/myantispyware](https://www.facebook.com/myantispyware) and [https://www.myantispyware.com/2023/04/04/mr-beast-token-drop-a-new-cryptocurrency-scam-emerges/](https://www.myantispyware.com/2023/04/04/mr-beast-token-drop-a-new-cryptocurrency-scam-emerges/) \[9\] [https://www.ukfinance.org.uk/news-and-insight/press-release/over-ps12-billion-stolen-through-fraud-in-2022-nearly-80-cent-app#:~:text=Over%20%C2%A31.2%20billion%20was%20stolen%20through%20fraud%20in%202022](https://www.ukfinance.org.uk/news-and-insight/press-release/over-ps12-billion-stolen-through-fraud-in-2022-nearly-80-cent-app#:~:text=Over%20%C2%A31.2%20billion%20was%20stolen%20through%20fraud%20in%202022) \[10\] [https://fourthcapital.com/educational-article/avoid-qr-code-scams/](https://fourthcapital.com/educational-article/avoid-qr-code-scams/) \[11\] [https://www.cnet.com/tech/services-and-software/qr-code-scams-are-on-the-rise-heres-how-to-avoid-getting-duped/](https://www.cnet.com/tech/services-and-software/qr-code-scams-are-on-the-rise-heres-how-to-avoid-getting-duped/) Related Posts ## You may also like this [Similar Articles](https://csacyber.com/blog) [![](https://csacyber.com/hs-fs/hubfs/20230510-N1005919-Edit1.jpg?width=624&height=427&name=20230510-N1005919-Edit1.jpg)](https://csacyber.com/blog/fluidone-group-appoints-charly-davis-as-managing-director-of-csa-cyber-to-advance-its-security-first-strategy) August 24, 2026 2 min read ### [FluidOne Group appoints Charly Davis as Managing Director of CSA Cyber to advance its security-first strategy](https://csacyber.com/blog/fluidone-group-appoints-charly-davis-as-managing-director-of-csa-cyber-to-advance-its-security-first-strategy) Experienced industry leader joins FluidOne to strengthen integrated cyber, IT and secure networking... [![CSA Cyber](https://csacyber.com/hs-fs/hubfs/CSA%20Cyber%20Logo%20FNL_Stacked.png?width=40&height=40&name=CSA%20Cyber%20Logo%20FNL_Stacked.png) CSA Cyber](https://csacyber.com/blog/author/csa-cyber) [![](https://csacyber.com/hs-fs/hubfs/Untitled%20design.jpg?width=624&height=427&name=Untitled%20design.jpg)](https://csacyber.com/blog/csa-cyber-and-fluidone-named-as-suppliers-on-g-cloud-15) August 20, 2026 2 min read ### [CSA Cyber and FluidOne named as suppliers on G-Cloud 15](https://csacyber.com/blog/csa-cyber-and-fluidone-named-as-suppliers-on-g-cloud-15) CSA Cyber (CSA), part of the FluidOne Group, has been named as a supplier on Government Commercial... [![CSA Cyber](https://csacyber.com/hs-fs/hubfs/CSA%20Cyber%20Logo%20FNL_Stacked.png?width=40&height=40&name=CSA%20Cyber%20Logo%20FNL_Stacked.png) CSA Cyber](https://csacyber.com/blog/author/csa-cyber) [![](https://csacyber.com/hs-fs/hubfs/Engineered%20to%20Endure%20Campaign%20Assets%20(2).png?width=624&height=427&name=Engineered%20to%20Endure%20Campaign%20Assets%20(2).png)](https://csacyber.com/blog/why-organisations-lose-security-visibility-without-realising-it) August 20, 2026 6 min read ### [Why organisations lose security visibility without realising it](https://csacyber.com/blog/why-organisations-lose-security-visibility-without-realising-it) Before an organisation can understand risk, maintain control or respond effectively to emerging... [![CSA Cyber](https://csacyber.com/hs-fs/hubfs/CSA%20Cyber%20Logo%20FNL_Stacked.png?width=40&height=40&name=CSA%20Cyber%20Logo%20FNL_Stacked.png) CSA Cyber](https://csacyber.com/blog/author/csa-cyber) [![CSA Cyber Logo FNL_Full Logo](https://csacyber.com/hs-fs/hubfs/CSA%20Cyber%20Logo%20FNL_Full%20Logo.png?width=3463&height=1248&name=CSA%20Cyber%20Logo%20FNL_Full%20Logo.png "CSA Cyber Logo FNL_Full Logo")](https://csacyber.com/) Established in 2013, Cyber Security Associates Limited trading as CSA Cyber provides cyber consultancy and cyber managed services which help to detect, protect and educate against the ever-changing cyber threat. We have built our team from a foundation of Government (ex-Military) and Commercially experienced specialists all holding current and relevant cyber certifications. Today our core services are based around a 24/7 Security Operations Centre (SOC) based in Gloucester. #### News & Resources - [Blog](https://csacyber.com/blog) - [Case Studies](https://csacyber.com/case-studies) - [Downloads & Reports](https://csacyber.com/downloads-and-reports) - [Webinars](https://csacyber.com/webinars) - [Careers](https://csacyber.com/careers) - [Cyber Bundles (IT MSPs)](https://csacyber.com/cyber-bundles) #### Quick Links - [About Us](https://csacyber.com/about-us) - [Certifications](https://csacyber.com/certifications-and-awards) - [Our Parent Company](https://www.fluidone.com) - [Partners](https://csacyber.com/partners) - [Contact Us](https://csacyber.com/contact-us) - [Anti Bribery Policy](https://csacyber.com/hubfs/CSAAnti-BriberyPolicy.pdf) - [Complaints Policy](https://csacyber.com/hubfs/CSAComplaintsPolicy.pdf) - [Corporate Social Responsibility Policy](https://csacyber.com/hubfs/CSACorporateSocialResponsibilityPolicy.pdf) - [Slavery and Human Trafficking Statement](https://csacyber.com/hubfs/CSASlaveryandHumanTraffickingStatement.pdf) - [NCSC CHECK Status Verification](https://www.ncsc.gov.uk/organisation/csa-cyber/check-penetration-testing) - [CREST Approved Certification Verification](https://www.crest-approved.org/member_companies/csa-cyber/) #### Contact Information **United Kingdom - London** Cyber Security Associates Ltd 5 Hatfields, London, SE1 9PG   **United Kingdom - Gloucester** Cyber Security Associates Ltd Unit 11, Wheatstone Court, Waterwells Business Park, GL2 2AQ   **Phone:** [+44(0) 300 303 4691](tel:03003034691) **Email:** [hello@csacyber.com](mailto:hello@csacyber.com)   **United States of America** Cyber Security Associates Inc. 6010 W. Spring Creek Pkwy, Plano, Texas, 75024   **Phone:** [+1 469 750 1695](tel:14697501695)  **Email:** [hello@csacyber.com](mailto:hello@csacyber.com)   [![trust-pilot](https://csacyber.com/hs-fs/hubfs/trust-pilot.png?width=178&height=104&name=trust-pilot.png)](https://uk.trustpilot.com/review/csa.limited)   --- - [Website Terms of Use](https://csacyber.com/website-terms-of-use) - [Website Privacy Policy](https://csacyber.com/privacy-notice) - [Website Cookie Policy](https://csacyber.com/cookie-policy) Copyright 2026. Cyber Security Associates Ltd [Follow us on Facebook](https://www.facebook.com/CSALIMITED/) [Follow us on LinkedIn](https://www.linkedin.com/company/csa-cyber/) [Follow us on Twitter](https://twitter.com/cybersecurityis) [Follow us on Facebook](https://www.youtube.com/@cybersecurityassociateslim) [Follow us on Facebook](https://www.instagram.com/cybersecurityassociates) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Sarah Lane", "url" : "https://csacyber.com/blog/author/sarah-lane" }, "dateModified" : "2024-12-06T12:58:05.595Z", "datePublished" : "2023-06-02T04:15:00.000Z", "headline" : "The Dark Side of QR Codes", "image" : [ "https://csacyber.com/hubfs/qr-code.jpg" ], "mainEntityOfPage" : { "@id" : "https://csacyber.com/blog/the-dark-side-of-qr-codes", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://csacyber.com/hubfs/csacyber-logo-black-01.svg" }, "name" : "Cyber Security Associates Ltd" } } ```