The growing abuse of QR codes in malware and payment scams prompts FTC warning - eviltoast
  • RGB3x3@lemmy.world
    link
    fedilink
    English
    arrow-up
    27
    arrow-down
    1
    ·
    11 months ago

    Okay, but explain to me how you’re supposed to tell the difference between a legitimate QR code and a fake one?

    It’s trivially easy to make a mockup of a restaurant’s QR menu so that people scan it when they sit down, expecting to get an online menu.

    • scorpionix@feddit.de
      link
      fedilink
      English
      arrow-up
      7
      arrow-down
      1
      ·
      11 months ago

      Is the QR Code applied professionally to the surface, possibly behind some security feature such as glass or another surface finish? Is the menu on the table in the general style of the restaurant, or does it look off or entirely different? Is the QR code applied on top of something else, possible another QR code?

      Don’t use apps which directly open QR codes. Any sensible app will tell what the information is before processing it.

      And at last, the simplest and most efficient security measure of all: Commonsense. Don’t scan everything you come across. Restaurant menu? Sure. Some random poster out in the woods promising a quick buck, happy time or their like? Hard pass.

      • Nollij@sopuli.xyz
        link
        fedilink
        English
        arrow-up
        15
        ·
        11 months ago

        Part of the problem with security is they even when it’s legitimate, it acts like the scammers.

        I’ve seen restaurants where their (legitimate) QR code is clearly printed on a home printer and used in lieu of physical menus in order to save money. If the link changes, they will simply tape the new one on top of the old, even on the most official copy you can find.

      • phx@lemmy.ca
        link
        fedilink
        English
        arrow-up
        8
        ·
        11 months ago

        Given that how restaurants present these various greatly, it wouldn’t be terribly unexpected for the official QR to be a sticker on the menu or table either

        • RGB3x3@lemmy.world
          link
          fedilink
          English
          arrow-up
          3
          ·
          11 months ago

          I’ve been at restaurants where that’s exactly the case. The QR is just a sticker on the table. Or a laminated card with the code on it.

          Would be trivially easy to replace it with a malicious site.