top of page

QR Code Scam: Don't Let Hackers Steal Your Money While You Sleep


QR codes are becoming increasingly popular, and you'll find them almost everywhere today. They're on flyers, posters, business cards, product packaging, and even on restaurant menus. QR codes make it easy for businesses to share information with their customers, but they're also being used by scammers to steal money from unsuspecting victims.


Recently, a woman in Singapore lost $20,000 to a bubble tea survey scam after scanning a QR code that contained malware. The scam was so sophisticated that it managed to steal the money while she was sleeping. This incident highlights the need for individuals and businesses to be vigilant when it comes to QR code scams.


In this blog post, we'll explore what QR code scams are, how they work, and what you can do to protect yourself.


What are QR code scams?

QR code scams are a type of scam where fraudsters use QR codes to trick victims into revealing their personal and financial information. Scammers create QR codes that contain malware, and when a victim scans the code, the malware infects their device, giving the scammers access to their personal and financial information.


One of the most common types of QR code scams is the fake survey scam. In this scam, fraudsters create a fake survey and offer a reward, such as a gift card or cash, to those who complete it. Victims are asked to scan a QR code to access the survey, and once they do, the malware infects their device, giving scammers access to their personal and financial information.


How do QR code scams work?

QR code scams work by exploiting the trust of the victim. Scammers create QR codes that look legitimate, and victims scan them without suspecting anything. Once the code is scanned, the malware infects the victim's device, giving the scammers access to their personal and financial information.


In the case of the bubble tea survey scam, the victim was asked to scan a QR code to complete a survey. Once the code was scanned, the malware was installed on her device, and the scammers were able to access her banking app and transfer $20,000 to their account.


How to protect yourself from QR code scams?

To protect yourself from QR code scams, you should take the following steps:

  1. Don't scan QR codes from unknown sources - only scan QR codes from trusted sources.

  2. Check the URL before scanning - make sure the URL is legitimate and not a phishing website.

  3. Use a QR code scanner with malware detection - there are many QR code scanners available that can detect malware.

  4. Install antivirus software on your device - antivirus software can detect and remove malware.

  5. Keep your device software up to date - software updates often contain security patches that can protect your device from malware.


What businesses need to do to protect customers?

Businesses that use QR codes should take the following steps to protect their customers:

  1. Use a trusted QR code generator - use a QR code generator from a reputable source.

  2. Inform customers about the risks of QR code scams - educate your customers about the risks of QR code scams and how to protect themselves.

  3. Monitor QR code usage - monitor QR code usage to detect any suspicious activity.

  4. Report any suspicious activity to the authorities - report any suspicious activity to the authorities immediately.

What individuals need to do?

Individuals can take the following steps to protect themselves from QR code scams:

  1. Be cautious when scanning QR codes - only scan QR codes from trusted sources.

  2. Verify the URL before scanning - check that the URL is legitimate and not a phishing website.

  3. Use a QR code scanner with malware detection - use a QR code scanner that can detect malware.

  4. Install antivirus software on your device - antivirus software can detect and remove malware.

  5. Keep your device software up to date - software updates often contain security patches that can protect your device from malware.

  6. Be wary of offers that seem too good to be true - scammers often use the promise of rewards or prizes to lure victims into scanning QR codes.

  7. Review your bank statements regularly - review your bank statements regularly to check for any unauthorized transactions.

In addition to taking these steps, individuals should also be aware of their rights under the Personal Data Protection Act (PDPA). The PDPA is a Singaporean law that regulates the collection, use, and disclosure of personal data by organizations. The PDPA requires organizations to obtain individuals' consent before collecting their personal data and to protect their personal data from unauthorized disclosure.


If you believe that your personal data has been compromised as a result of a QR code scam, you should contact the Personal Data Protection Commission (PDPC) for assistance. The PDPC is the Singaporean government agency responsible for enforcing the PDPA.


TAKEAWAYS

QR code scams are a growing threat to individuals and businesses alike. Scammers are using QR codes to trick victims into revealing their personal and financial information, and the consequences can be devastating. To protect yourself from QR code scams, you should be vigilant when scanning QR codes, use a QR code scanner with malware detection, and keep your device software up to date. Businesses should also take steps to protect their customers and educate them about the risks of QR code scams. By following these steps, you can stay safe from QR code scams and keep your personal and financial information secure.


References:
  • "Woman who scanned QR code with malware lost $20k to bubble tea survey scam while she was sleeping." The Straits Times. Retrieved from https://www.straitstimes.com/singapore/woman-who-scanned-qr-code-with-malware-lost-20k-to-bubble-tea-survey-scam-while-she-was-sleeping.

  • "Personal Data Protection Act (PDPA)." Personal Data Protection Commission. Retrieved from https://www.pdpc.gov.sg/Overview-of-PDPA/The-Legislation/Personal-Data-Protection-Act.

Commentaires


Disclaimer: The information provided on all our blog post is intended for general informational purposes only and does not constitute legal advice. The author and publisher are not liable for any damages or losses resulting from reliance on this information. It is recommended to consult with a legal professional for specific advice regarding PDPA compliance and other related data privacy obligations.

bottom of page