Guardian Nigeria
National Information Technology Development Agency (NITDA) has alerted Nigerians to the new mode by scammers, who now deploy Quick Response (QR) codes to defraud users.
In its latest advisory at the weekend, the organisation said unpatriotic elements currently deploy QR codes for phishing scamming, payment fraud and data theft.
For clarification, a QR code is a machine-readable sign, consisting of an array of black and white squares, typically used for storing Uniform Resource Locators (URLs) or other information for reading by the camera on a smartphone.
While advising Nigerians, the agency warned: “QR codes, while fast and convenient for quick access to information and actions, have, unfortunately, become a tool exploited by scammers for fraudulent activities. These activities take various forms and are designed to lure unsuspecting users into scamming them.
“The implications of these codes on users vary, depending on the approach employed by the scammer. Impact QR codes can be exploited by malicious actors to deceive unsuspecting users and perpetrate fraudulent activities.”
According to NITDA, scammers utilise QR codes in various ways to achieve their nefarious goals.
It highlighted the various ways by saying: “Phishing scammers can generate QR codes that point to malicious applications or phishing websites. Users scan to see these codes, thinking they are genuine, and end up having their information stolen.
“Scammers can create QR codes that start illicit transactions or reroute payments to their accounts, rather than to the intended recipients.
“Threat actors may embed malicious payloads like malware or data-stealing scripts within QR codes. By exploiting security vulnerabilities in users’ devices, they can steal private documents, financial information and passwords, among other sensitive data.
“Users’ personal information, including names, addresses and contact details, can be collected using QR codes inserted in fake advertisements or online surveys. This information can then be exploited for identity theft or other targeted frauds.”
To avoid falling victim, NITDA advised users to always verify the legitimacy of QR codes and associated links.
