From restaurant menus to parking payments, QR codes have pretty much taken over our daily lives as this point. But that familiar black-and-white square can also be used to steal your passwords, banking details and other personal information. Dubai Police are warning residents about a growing scam called “quishing”. Yup, it comes from the same concept as ‘phishing.’ I have all the details you need to know about how to safeguard yourself from QR code scams so keep reading to find out more.
What Exactly Is Quishing & How Does It Work?
Dubai Police’s eCrime Hub explains that quishing is short for QR code phishing. Scammers use dodgy QR codes to send you to fake websites, push you to download something unsafe or get you to hand over sensitive information. Here’s what makes it more sneaky than with a normal scam link. With a suspicious link in an email or text, you can at least see the web address. A QR code hides it until you scan, so it’s worth checking where a code came from before you open it.
A fake code could turn up on a flyer, a restaurant table, a parking area or even in a message sent to your phone. Once you scan it, you could land on a fake website made to look like a real service. Dubai Police’s eCrime Hub says you might then be asked for things like your Emirates ID details, banking information or passwords. Other times, the code may try to get you to download a harmful app or file.
4 Red Flags To Watch Out For
Dubai Police suggests being careful if:
- The QR code is in an odd spot, or looks like it’s been stuck over another physical code or sign. Think somewhere like a paid parking sign, giving residents instructions on where to pay.
- The website straight away asks for sensitive details like your Emirates ID, banking information or passwords.
- The page looks off, has spelling mistakes or has a suspicious web address.
- You’re suddenly asked to download an app or file after scanning.
How to Keep Yourself Safe
Take a quick look at where the QR code is placed before you scan it. If it looks like a sticker covering another code, or just seems out of place, leave it alone.
After scanning, check the website address before you open the link. Most smartphones let you preview where the code is taking you. If the address looks unfamiliar or fishy, close it.
Dubai Police also advise against typing in personal or banking details on a website you reached through a QR code, especially if the request comes out of nowhere. And if a QR code asks you to install an app, only download it from an official app store, never through a link or pop-up.
Think You’ve Scanned A Dodgy Code? This Is What You Should Do
If you believe you’ve scanned a fake QR code or landed on a fake website, Dubai Police advise closing the page straight away without entering any information. Next, take screenshots of the QR code, the suspicious website and any related messages. These can help when you report it.
Where To Report It
You can submit a report to the Dubai Police eCrime Division through eCrime.ae or in the eCrime section of the Dubai Police app. For enquiries and information, residents can call 901. The number 999 is only for emergencies.
If you’ve already entered personal or banking details, Dubai Police advise contacting your bank immediately and letting the police know. Also be wary of unexpected login alerts or verification codes you didn’t ask for. These can be reported through Dubai Police’s eCrime channels too.
