Not All QR Codes Are Safe, Kaspersky Warns

From C. Vinoothene

SINGAPORE, April 25 (Bernama) – The usage of quick response (QR) codes among Malaysians has become the new normal — from banking services and exchanging contacts to ordering food.

However, with the rise in QR code usage, cybersecurity firm Kaspersky has cautioned Malaysians to remain vigilant against a growing threat: QR scams.

bootstrap slideshow

According to Kaspersky’s lead security researcher Noushin Shabab, QR scams are a new form of cyber threat in which attackers generate malicious QR codes that compromise users’ cyber safety.

“QR scams happen when a code is turned into a malicious one, potentially stealing users’ information or money, or causing other complications that jeopardise their safety.

“With increased usage of QR codes in Malaysia, more attackers are seeing this as an opportunity to exploit,” she said in an interview with Bernama at GITEX Asia 2025, Marina Bay Sands today.

bootstrap slideshow

According to the DataReportal Digital 2025 Global Overview Report, Malaysia ranks second after China in QR code usage, with 66.1 per cent of the population actively using them.

Noushin explained that QR scams often involve attackers replacing legitimate QR codes in public places with malicious ones, tricking unsuspecting users into scanning them.

“These malicious QR codes are usually placed over original ones on billboards or posters and redirect victims to an attacker’s website,” she said.

Meanwhile, Kaspersky’s security evangelist Oleg Gorobets said users can protect themselves by installing certified security software on their phones that can detect suspicious activity, including malicious QR codes.

“Attackers use different algorithms to mimic the original website’s structure, redirecting users to a fake one. A good security solution will detect and block this threat,” he said.

Additionally, Noushin advised users to take extra precautions when scanning QR codes in public spaces and to always verify the source.

“For example, if there’s a random QR sticker on a billboard or wall — that’s not safe.

“Or if someone you just met offers a QR code to connect with them — that’s also a red flag. Know the source. Ask where it came from, why it’s there, and what it leads to before scanning,” she said.

Bukit Aman Commercial Crime Investigation Department recently reported 12,110 cases of online fraud or scams nationwide in the first quarter of 2025, involving RM573.7 million in losses versus 10,715 cases valued at RM519.9 million in October-December 2024.

-- BERNAMA