Authorities Warning of A New Scam Targeting Alabamians

The Better Business Bureau (BBB) of Central and South Alabama is alerting residents about a rising threat known as “Quishing.” This alarming type of phishing scam utilizes QR codes to deceive individuals into visiting harmful websites or downloading malicious content.

Canva

As QR codes become increasingly popular—used for everything from restaurant menus to payments—scammers have seized the opportunity. Recent statistics reveal that QR code phishing has skyrocketed from just 0.8% of all cyberattacks in 2021 to nearly 11% in early 2024. These scams often target unsuspecting consumers who scan codes without a second thought.

**What is Quishing?** Quishing involves fraudsters creating fake QR codes and distributing them through phishing emails, social media, printed materials, or in public places. When a victim scans the code, they may be redirected to a seemingly legitimate website designed to steal personal information or install malware.

Common Quishing Tactics Include:

- **Fake Parking Meters:** Scammers replace legitimate QR codes on parking meters, leading users to malicious websites that capture payment information.

- **Phishing Emails:** Fraudulent QR codes in emails mimic trusted organizations, tricking recipients into scanning them to verify accounts.

- **Public Spaces:** QR codes placed in restaurants or public transport ads can mislead users into visiting harmful sites.

- **Promotional Scams:** Codes advertising “free gifts” or discounts often redirect to sites that gather personal data or install malware.

Protect Yourself

1. **Verify the Source:** Always check that QR codes come from a trusted source before scanning.
2. **Inspect URLs:** Use a QR scanner app that previews URLs. If the link looks suspicious, don’t proceed.
3. **Update Security Tools:** Ensure your security software can detect QR-related threats.