QR codes are all around us. You might find a QR code plastered on billboards, buildings and bus stops. They’re also on digital screens, from TV commercials to sign-in screens for streaming applications.
Despite being around since 1994, the QR code exploded into our everyday lives during the pandemic. When the shutdown started to lift, but social distancing was still in place, QR codes became menu replacements at restaurants and were printed on receipts as contactless payment methods.
John Joyce, co-owner and CEO of CRS Technology Consultants, recently shared his expertise on QR codes with viewers of Gulf Coast News in Fort Myers.
“The cost of convenience is security, and the cost of security is convenience,” he said, “and it’s balancing that equation.”
In the segment titled “Tech Bytes: Can QR codes be used maliciously?” John explores the convenience and risk associated with a QR code. With an abundance of QR codes today, the risk of using them increases. QR codes can be easily tampered with by placing a malicious look-alike over a well-meaning code or pretending to direct scanners to a reputable website. In reality, it sends them to sites that install malware or steal personal information.
What is a QR code?
Quick Response Codes – QR codes – are barcodes that can be scanned by smartphones to link to a website, messaging or contact information.
They were originally created for production lines to help move products through assembly in 1994.
QR code Tips for Consumers
Individuals should keep this in mind when deciding whether to scan a QR code:
- Only scan what you recognize as safe. If you don’t recognize the company or if the code is offering something seems too good to be true, don’t scan it. Instead, look up the company’s website to verify its legitimacy.
- Quality QR code scanners, like the camera feature on the iPhone, will preview the beginning of a QR code link before navigating to the website. Be sure to verify that the preview being displayed is what the QR code says will open.
- If the QR code seems suspicious or you are unsure, take the extra time to type in the website instead of scanning.
During the segment on Gulf Coast News, John showed two QR codes in a display. Both appeared to direct users to CRSTC.com, but one of them actually redirected to the Gulf Coast News website. Users would not know this unless they checked the on-screen preview link.
Advice for businesses
CRS and other IT companies instruct partners to “stop, think, act.” Being skeptical before opening attachments or clicking links helps prevent unintended results. That means businesses need to up their game to make sure users feel confident scanning a QR code.
- Using QR codes as a business requires transparency. When posting QR codes in public places, include the written link for comparison purposes. Include descriptive verbiage like “This code leads to…” before writing out the link.
- Use a branded QR code with custom colors or the business logo to make it harder for imposters to create a harmful code.
- Educate users before they scan. Let them know where the code will lead and what information they’ll find.
- Consistently check QR codes for signs of tampering. If codes are in a storefront or easily controlled environment, check them for any stickers or evidence of being replaced. For QR codes in public areas like billboards or buses, ask for verification that the QR code is still up and analyze it for any signs of tampering.
LISTEN: Solid State Podcast
