Quick response (QR) codes are fast becoming part of everyday life in the United States. These small two-dimensional graphic images that store information horizontally and vertically can be found in countless print and television advertisements, restaurant menus, product packages, retail stores, and more. Small businesses and large brands alike use QR codes as marketing tools to provide access to detailed product information and special offers and promotions.

While these small, pixelated squares offer convenience and efficiency, they also open the door to security concerns that shouldn't be overlooked. This Ameris Bank blog article explains how to use QR codes safely.

 

What Are QR Codes?

Before discussing the potential risks of using QR codes and how to avoid them, we want to explain what they are. Their origin dates back to 1994 in Japan when the Denso Wave corporation developed the technology to track automobile parts as they moved through the automobile assembly process.1 The QR code was a new barcode format used by Denso Wave.

A QR code consists of black-and-white squares and elements (called modules) that, when scanned with a smartphone camera or another optical scanning device, interpret software and determine the code's orientation. The amount of required digital data determines the size of a QR grid. For example, there are QR codes with a 21 x 21 module configuration (less data) up to a 177 x 177 module configuration (more data).

The use of QR codes grew steadily throughout the 2010s and is now experiencing a significant surge in popularity. Statista reports that usage of mobile QR code scanners is expected to reach more than 100 million users in the United States by 2025.2

 

Safety Tip #1: Verify Before Scanning

Unfortunately, scammers can create bogus QR codes that redirect you to a phishing website or launch unwanted downloads on your device. So, always check where the QR code is located before scanning it. Is it from a trusted business or organization? Does it appear in an official setting? Does the QR code or any accompanying messaging seem suspicious? If you're not sure about the QR code or where it came from, it's better to exercise caution and avoid scanning it altogether.

 

Safety Tip #2: Use A Secure QR Code Scanner

One effective way to prevent QR code fraudsters from taking advantage of you is to use a dedicated QR scanner with top-level security features. Free and paid QR scanners are available for all types of mobile phones and mobile devices and their respective operating systems. Secure QR scanners provide additional layers of protection by alerting you if a scanned QR code appears suspicious or is about to redirect you to an unsafe website page or link. You can find secure QR scanners in official app stores.

 

Safety Tip #3: Check The Referring URL When Scanning

It is very important to check the referring URL notification after scanning a QR code. Fraudsters use fake QR codes to trick users, redirect them to fake landing pages, and ask them to download spammy files or provide sensitive information. You should exit your mobile browser if you scan a QR code and don't recognize the referring URL or if the URL is not securely encrypted (it lacks an HTTPS certificate). Next, manually clear your mobile device's Internet cache files to maximize your personal security. This step can help prevent spammy sites from collecting your data.

 

Safety Tip #4: Don't Download Apps From QR Codes

If you scan a QR code and a message appears asking you to download an app, disregard it and exit your browser right away. QR fraudsters often install malware on fake apps that, when downloaded, can compromise your privacy, steal sensitive data, or even damage your mobile device.
Always use official app stores to download applications to protect your digital well-being. Official app stores thoroughly review and vet all apps to ensure user safety.

 

Safety Tip #5: Be Careful Of QR Code Scams In Emails

It's no secret that email scams are one of the most widely used forms of identity theft in the United States. Now, fraudsters are sending spammy emails with fake QR codes in the email body or signature line. This deceptive tactic makes the emails appear legitimate and professional. Therefore, it's important to carefully review incoming emails to ensure they are from trusted senders. If you notice anything unusual, such as a misspelled company name in the email URL, it's best to ignore the email and mark it as spam.

 

What To Do If You Accidentally Scan A Fraudulent QR Code

If you accidentally scan a fraudulent QR code, acting swiftly to mitigate potential damage is crucial, especially if you've entered sensitive personal or financial information. First, it is a good idea to change your passwords and add two-factor authentication (2FA) to accounts that may be compromised. Second, if you provided any financial information via the spammy QR code link or download, contact your bank immediately and tell them what happened. Finally, manually clear your mobile device's cache.



Sources:
1. https://www.britannica.com/technology/QR-Code
2. https://www.statista.com/statistics/1297768/us-smartphone-users-qr-scanner/


Reviewed April 2025

Ameris Bank is not affiliated with nor endorses Britannica.com, Denso Wave, or Statista. The opinions voiced in this material are for general information only and are not intended to provide specific advice or recommendations for any individual. 

Information presented in the Financial Advice website is provided for educational purposes only and is not related to Ameris Bank's actual products or services. Ameris Bank makes no representations as to the accuracy, completeness or specific suitability of any information presented. Information provided should not be relied on or interpreted as accounting, financial planning, investment, legal or tax advice. Ameris Bank recommends you consult a professional for any specific guidance you are seeking.