By Linus Garg
First publised on 2024-09-15 07:44:47
The Rise of Quishing Scams in India: A Growing Threat to Digital Payments
With the surge in digital payments across India, driven by the convenience of platforms like UPI, a new wave of scams has emerged. One particularly concerning method is quishing, a technique that leverages QR codes to trick unsuspecting individuals into sharing their personal and financial information.
What is Quishing?
Quishing, a combination of "QR" and "phishing," involves the use of fraudulent QR codes to redirect users to malicious websites. These websites often impersonate legitimate platforms, such as banks or e-commerce sites, to deceive users into entering their sensitive data.
The Growing Menace
"Quishing is a relatively unknown but rapidly growing problem that exploits QR codes on mobile devices", warns Trevor Cooke, a privacy expert at EarthWeb.
Quishing attacks are set to grow dramatically, from 0.8% of all email phishing attacks in 2021 to a staggering 10.8% in 2024 according to a recent intelligence report.
UPI fraud complaints have seen a significant increase in India (from 15,000 cases in 2022 to over 30,000 in 2023), with cases involving QR code scams accounting for a substantial portion.
This trend highlights the growing sophistication of cybercriminals and the need for heightened awareness among users.
Beyond UPI: The Broader Risks
Quishing scams are not limited to UPI payments. Scanning any QR code that redirects to a third-party website can pose a risk to your financial security. These codes can be found in various settings, making it essential to exercise caution.
How Quishing Works and Staying Safe
Scammers often employ tactics like requesting victims to scan QR codes that lead to fraudulent websites. These sites may ask for UPI PINs or other personal information under the guise of verification. Once obtained, scammers can gain unauthorized access to bank accounts and siphon off funds.
To protect yourself from quishing scams:
1. Avoid scanning suspicious QR codes.
2. Verify the authenticity of websites.
3. Never share your UPI PIN or personal details.
By staying vigilant and informed, you can help mitigate the risks associated with quishing scams and ensure the security of your digital transactions.