"QR codes" are used for shopping payments and access to specific sites. It's convenient to use just by scanning it with your smartphone. I think there are many people who use it every day.

But now, the abuse of this QR code is increasing.

If you access it inadvertently, it may be a big problem.
(Digital Fooling Interview Team / Shimada Naoaki)

I received an email with a QR code

"There is a problem with your payment method and you are unable to redeem your offer, please scan the QR code to prevent your webpage from being hijacked."

This is an email sent in the name of a major mail order site in January. A QR code was displayed in the text.

However, what I was connected to was not a mail order site, but a phishing site that steals personal information. The site asks for your email address, password, etc., and if you type it, the information will fall into the hands of criminals.

1,1000 suspicious emails with QR codes in one month

Emails displaying such QR codes have been confirmed one after another in Japan since last fall.

According to the Anti-Phishing Council, these suspicious emails with QR codes have been seen since around November last year, and about 11,1 cases have been reported in January alone.

The reason why QR codes are used is believed to be to bypass the function of email software that blocks malicious URLs.

Not only mail order sites, but also those that display QR codes that lead to fake ETC sites in the form of ETC portal sites have been confirmed.

Fake QR code stickers Sticking crimes too

QR code abuse is already causing widespread damage overseas.

In January last year, the US Federal Bureau of Investigation = FBI called attention to the possibility that personal information could be stolen by being directed to a malicious site from a QR code.

According to security companies, in several cities in the United States, there have been many crimes in which fake QR code stickers are affixed to legitimate QR codes for payment on parking meters installed on the streets.

Also, in the Netherlands, a fraud occurred in which a fake attendant lied that "the payment machine at the parking gate cannot be used" and showed a QR code to make you pay the fee.

In China, there have been reports of cases where QR codes that allow users to pay to unlock bicycles are replaced when paying for bicycle sharing, and the fees paid are transferred to the attacker's account.

What's more, scanning the QR code could lead you to a fake website that would download a rogue program, automatically add contacts, start a call, or send you a message.

QR code stickers without permission from vending machines ...

There are other risks besides phishing scams and fraudulent transfers.

In Japan, QR code stickers leading to websites asking for donations have been confirmed one after another on vending machines and toilets, and businesses have called for caution.

Three Mindsets to Avoid Scratching

What can we do to avoid being caught by scams that abuse QR codes? First of all, regarding emails that encourage access from QR codes, the Anti-Phishing Council urges people to never access them because there is a high possibility of fraud.

Actually, anyone can easily create a QR code. For example, this QR code.

It is a QR code that leads to NHK's site of "Don't be fooled digitally", but it took less than 10 seconds to create. There are many services and apps on the net that create QR codes for free.

Many people may be conscious of not opening suspicious URLs in emails, but it is important to have the same awareness with QR codes.

Some QR codes displayed everywhere in the city are not issued by certain sources.

When reading QR codes such as posters in public spaces, security companies
warn people to check whether there is a sticker on top, check the URL displayed when scanning the code,

and do not read QR codes that are not familiar with the publisher.

QR codes are now used by everyone on a daily basis. Before you accidentally hold up your smartphone, you may need to doubt even a little, "Is it really okay?"

NHK News Post

#デジタルでだまされない
interview team is looking for your opinions on how not to be fooled by your experiences.