QR codes are everywhere now. Restaurant menus, parking meters, parcel lockers, posters, emails, business cards… you name it. They’re brilliant for convenience. Point your camera, tap once, and you’re exactly where you need to be.
But that same convenience is exactly why scammers like them too.
What a QR code can do
A QR code is basically just a shortcut to something. Most commonly it will:
• Open a website
• Start a payment page
• Add contact details to your phone
• Connect you to Wi-Fi
• Start an app download
• Pre-fill an email or message
Nothing particularly magical… it’s just encoded data.
What a QR code cannot do
Contrary to what some people think, a QR code cannot:
• Hack your phone
• Install software by itself
• Steal your data automatically
• Access your camera, contacts, or files
Your phone still needs you to confirm anything risky.
Think of it like clicking a link. The code itself isn’t dangerous. Where it sends you might be.
Where the risks actually are
Scammers use QR codes mainly for redirection.
Examples we’re seeing more often:
• Fake parking payment QR codes stuck over legitimate ones
• QR codes in phishing emails that lead to fake Microsoft or banking logins
• Stickers placed on public posters that redirect to malicious websites
The trick is simple: you scan it, it opens a website that looks legitimate, and then it asks you to log in or pay.
How to stay safe
A few easy habits dramatically reduce risk:
✔ Check where the link goes before opening it – most phones show the URL first
✔ Avoid random QR codes in public places (especially stickers)
✔ Never log into accounts from a QR code unless you trust the source
✔ Use official apps for payments when possible (parking apps etc.)
✔ Be cautious with QR codes in emails – they’re often used to bypass spam filters
If something looks rushed, urgent, or slightly off… trust your instincts.
A good rule of thumb
If you wouldn’t click a suspicious link, don’t scan a suspicious QR code either.
Same idea. Just a different shape.
💡 At AmbroTech, we believe good IT support isn’t just fixing computers.
It’s about empowering people with the knowledge to stay safe and confident using technology.
We regularly help individuals and small businesses with things like:
• Cyber resilience & awareness
• IT support and device protection
• Microsoft 365 setup and security
• Backups and ransomware protection
• Practical, plain-English tech advice
Technology should make life easier, not more stressful.
If you ever want friendly advice or support with your IT, feel free to get in touch.
AmbroTech
IT that works. Support that cares. 🐞💻
