Beware of QR code scams.

SGGPO 06/09/2023 20:31

To prevent QR code scams, representatives from the Information Security Department of the Ministry of Information and Communications recommend that users be especially vigilant about QR codes that are posted or shared in public places or sent via social media or email.

Fraud via QR code scanning is one of six issues that the Office of the Ministry of Information and Communications (MIC) assessed as prominent recently, in a report shared at the MIC's regular monthly press conference held on the afternoon of September 6th.

According to a report from the Ministry of Information and Communications, in addition to the issue of QR code payments at stores being tampered with, resulting in money being transferred to fraudsters' accounts, there has recently been a phenomenon of malicious QR codes being easily disseminated in articles and images through messaging applications, forums, and social media groups. When viewers scan these QR codes, they are redirected to gambling advertising pages containing malware that can be installed on their phones.

The Ministry of Information and Communications held its regular press conference on the afternoon of September 6th, chaired by Deputy Ministers Pham Duc Long and Nguyen Thanh Lam.

Responding to media inquiries at a press conference regarding QR code fraud, Mr. Nguyen Duy Khiem, representative of the Information Security Department (Ministry of Information and Communications), stated that QR codes have become increasingly popular everywhere, not only in Vietnam but also in many countries around the world . Especially after the impact of the Covid-19 pandemic, the demand for QR codes has increased rapidly. According to statistics from the Payment Department of the State Bank of Vietnam, QR codes have experienced strong growth in both quantity and value. In 2022, payments via QR codes increased by over 225% in quantity and over 243% in value compared to 2021. "This shows that the payment method using QR codes is becoming increasingly familiar to consumers," Mr. Nguyen Duy Khiem shared.

Along with the growing popularity of QR code-based payment methods, QR code fraud has also seen a significant increase globally, and has even appeared in Vietnam recently. Specifically, in Vietnam, in early August, several banks issued warnings about credit card fraud via QR codes. The warnings stated that fraudsters, after befriending victims on social media, would send QR codes for users to scan. These codes lead to fake bank websites that request users to enter information such as full name, citizen identification number, account details, security code, or OTP. From there, users' accounts are compromised. Compared to traditional malicious links, QR codes have the advantage of being able to be directly embedded in emails and messages without being blocked by filters, making them easier to target.

Representatives from the Information Security Department also clarified that, in reality, QR codes are not malicious code used for direct attacks, but merely act as intermediaries to transmit content. Whether users are attacked depends on how they process the content after scanning the QR code.

Nguyen Duy Khiem, representative of the Department of Information Security (Ministry of Information and Communications), speaks with the press at the press conference.

Based on the above facts, Mr. Nguyen Duy Khiem recommends that users first be cautious before scanning QR codes, especially those posted or shared in public places or sent via social media or email. Users should also carefully identify and verify the account information of the person exchanging the QR code; carefully examine the content of the website the QR code leads to; check if the link starts with "https" and if it is a familiar domain name. In addition, users are strongly advised not to provide personal information such as bank login accounts or social media accounts. Use password managers, two-factor authentication, and other account protection methods.

Regarding organizations providing QR codes, representatives from the Information Security Department suggested that they should pay attention to warning and educating users, similar to how banks have recently warned their customers. These agencies and organizations should also promptly provide solutions to verify transactions showing signs of irregularities. Furthermore, they should regularly inspect the QR codes displayed at the point of sale.

Source