Although 42% of Dutch people believe QR codes pose a threat to their digital security, three quarters of Dutch people rarely if ever doubt whether they should scan a QR code. This is according to research by KnowBe4, provider of security awareness training, among 340 Dutch people on the use and perception of QR codes.
The use of QR codes
QR codes are nowadays impossible to imagine our society without. The Dutch use QR codes for many different purposes. The survey shows that QR codes are by far the most used for doing banking business (71%), followed by communication with the government such as the tax authorities (45%). When advertising businesses, for example through flyers (32%) and festivals and parties (32%), QR codes are also often used.
Sharing data without authentication poses risks
The popularity of QR codes has not escaped cybercriminals either. They use QR codes as a means to manipulate people, also known as quishing. After scanning a QR code, their victims land on a rogue website asking them to enter data or transfer an amount of money. The survey shows that 42% of Dutch people consider QR codes a danger to their digital security. Still, one in three (34%) respondents sometimes fills in data on a website without checking whether it is a safe website. 22% of respondents sometimes enter data but check beforehand whether the website is safe. 44% of respondents said they never enter data on a website after scanning a QR code.
Although scanning QR codes seems harmless, one in 10 Dutch people have nevertheless occasionally ended up on a shadowy site after scanning a QR code (9%). For 6% of respondents, this actually resulted in their data, money or even both being stolen.
Minority of Dutch people use security software
Good security software can help block a malicious website in time and prevent data or money from being stolen. Yet a minority of Dutch people have security software installed on their mobile phone or tablet. Only 14% have a paid account, while 27% use a free application to do so. 21% of respondents say they have no security software and have never thought about installing it. 31% of respondents have no idea, while a small percentage (7%) think it is nonsense to install security software.
Standard camera app most popular for scanning QR codes
There are several ways to scan a QR code. Three quarters of Dutch people (76%) use their phone's standard camera app for this, 13% use a pre-installed app for QR codes and 9% use a free app they downloaded themselves. Only 2% say they never scan QR codes.
Dr Martin J. Krämer, Security Awareness Advocate at KnowBe4: "Scammers use different tactics to manipulate people and take money or data from them. Although sending phishing emails is still the most popular tool, we see the use of rogue QR codes increasing. People should therefore be vigilant: when scanning QR codes, they should only use their phone's camera app to do so and always install security software. Never just enter your details on a website and always check if it is a secure website first. If you don't trust it, visit the website via your internet browser or call an authority to check if it is a legitimate form. It is important that people are properly educated on the safe use of QR codes. Employers can take responsibility by training their employees on the tactics used by scammers. This way, people learn to remain vigilant and never volunteer information to strangers."
Read the Dutch report on the survey here.