Security tips before scanning QR codes

In the fast-changing digital world, QR codes make accessing information quick and easy. However, with this convenience, there are also risks. Whether you are scanning a menu or visiting a business website, it is important to prioritize your safety.

Here are some critical points to remember when scanning QR codes:

Avoid scanning QR codes from unknown sources:
One of the common techniques that attackers may use is replacing a real QR code with a harmful one. This can be done by placing a sticker over the genuine QR code on a public poster or tampering with an email to include a fake QR code. Check for any suspicious alterations on posters and avoid scanning QR codes embedded in unsolicited messages from suspicious sender. (Note: Reminder message from external sources, but the displayed sender name / address may show PolyU.)

Be aware of “Quishing” email:
The word “Quishing” means phishing emails that use QR codes as the media to spread malicious link. This type of phishing email may have a higher chance to bypass traditional email protection mechanisms and reach your inbox. When unsure, always check with the sender via different channels, especially for QR codes that require login or making a payment.

Verify URLs and check for secure connection:
Check the link before opening it. After entering the website, check the authenticity of the website before taking any actions. Make sure that HTTPS is enabled and there is no warning from the browser. Be cautious if shortened URLs are used in the QR code.

Use trusted scanning apps and update regularly:

Always use built-in or well-known QR code scanners. Third-party scanners from unknown sources may harm your device or be easily compromised. Regularly update your scanner, browser, operating system and anti-virus software.

If you need further information or assistance, please contact the IT HelpCentre (Tel: 2766 5900, WhatsApp/ WeChat: 6577 9669) or reach out to us via the IT Online ServiceDesk.