As technology advances at a fast rate, Australians have been accustomed to QR codes, especially since they became a staple during the pandemic.

Yet, with every technological advancement comes a new opportunity for criminals to exploit citizens, and the latest trend in digital deception is no exception.

Quishing—a blend of 'QR code' and 'phishing'—has been an insidious scam on the rise.

This time, it's targeting people's personal information in a concerning manner.

Unlike phishing scams, quishing scams entice victims to scan a QR code, which could lead them to malicious websites designed to harvest sensitive data.

QR codes recently gained popularity because of its scan-and-go nature. Image Credit: Pexels/Pixabay

The Australian Taxation Office (ATO) and Services Australia urged Aussies to be vigilant before scanning any QR codes impersonating them.

The nature of these scams varies, as some claim that the user has an overdue refund from the ATO.

Meanwhile, other scammers insist users to update their multi-factor authentication settings.

These fraudulent emails often include QR codes that redirect to fake login pages, where the scammers keep a record of your account details.

Once they have infiltrated your myGov account, scammers may file illegitimate claims for government payments.

They could also alter bank details to redirect your payments straight into their pockets instead.

'Whilst the ATO may use SMS or email to ask taxpayers to contact us, we will never send you an SMS or email with a link or a QR code to log in to online services,' an ATO spokesperson stated.

Services Australia echoed the ATO's sentiment.

Services Australia General Manager Hank Jongen warned that scammers have been posing as government entities to steal login credentials and personal information.

'We will never ask you to scan or copy a QR code to sign in to your myGov account,' Jongen stated.

His statement emphasised the importance of recognising legitimate correspondence from government agencies.

The Australian Signals Directorate (ASD) has responded to 30 quishing-related incidents in 2023-2024 and labelled it as an 'unseen threat' in QR code technology.

So, let's stay one step ahead of these digital predators.

Always check any QR code before scanning, especially if it's unsolicited or in an unexpected place.

If you receive a message from a government agency, contact the agency directly through official channels for verification.

Stay on top of the latest scams and how to prevent them with the SDC forum's Cybersecurity for Aussies Over 60 module here.

Key Takeaways

• Australians were warned about scanning QR codes due to the rise of quishing scams.
• The ATO and Services Australia have reported instances of QR code scams where scammers impersonate government agencies to access personal data.
• Government agencies like ATO and Services Australia do not send SMS or emails with QR codes or links asking users to log in to online services.
• The ASD responded to numerous quishing incidents in 2023-24, highlighting the importance of being cautious with QR code technology.

Have you encountered a quishing scam before? Share your experiences and advice in the comments below.

 

[Zemo]

If these scammongrels devoted half as much time to doing something good as they do to doing harm, think how much better off the world would be!

 

[alistev]

Way beyond me. Can't even get onto Office Works by phone now - press 1-3 for online options press 4 to walk into the store and talk to a team member. Telstra now the same and losing Platinum service whereby a techo could remotely fix a problem with the mouse - using their secured site, NAB go to a bank to get problems solved - been email chasing over 1 question to return an article under dispute since ... october. Were in town the other day and went into the bank saw a real 'human' as we are now called - and voila - that step moved on to the next. Can't query an electrity bill as have to go in..
We are not tech savvy and don't use scanners so our contact with the big world is becoming very narrow. We don't live in a town with facilities as all closed now.
SO its sit on the phone for an hour to get centrelink or Services NSW as our only means now of communication. Suppose phones will go next!!!!
But as for scanning - never did trust them hence won't use unless to scan something in a 'real' shop.

 

[ornithorhynchus]

we are all being conditioned to use a bulky smart phone these days.i have a NOKIA flip phone which allows me to make and receive phone calls and text messages ,not a computer in my pocket,Although these days it looks like we are all going to have to use a smart phone whether we like it or not.

 

[Jest]

i have just recently been receiving these from my gov. they go straight into my spam and I realise they have a suspicious address. deleted.

 

[freedy50]

I scanned a QR code yesterday, but that was to register in a RSL club. Otherwise I've never seen anything dodgy with these.