7 out of 10 Dutch people don’t know how to use QR codes safely

QR codes have become part of our daily lives, with one in four Dutch people scanning one each week. However, many don’t know how to do this safely. A recent survey by Ipsos I&O, commissioned by ABN AMRO, shows that while most people are aware of the risks of QR codes, only half of them think about these risks when actually scanning a code. And almost three-quarters don’t know how to check whether a QR code is reliable. This lack of knowledge can lead to financial damage or unintended sharing of personal data – something 1 in 10 Dutch people have already experienced. ABN AMRO stresses the importance of staying alert when using QR codes and is working to raise awareness on this topic.

“The use of QR codes has increased significantly over the past few years, partly due to the Covid period when they offered a safe, contactless way to exchange information and make payments. These days, they’re widely used for convenience by both small businesses and large corporations, as well as by government agencies. Fraudsters exploit this by spreading QR codes that lead to fake payment websites. Since you can’t always immediately see where a QR code link will take you, it’s important to stay alert when scanning,” says Marco Hendriks, fraud expert at ABN AMRO.

Occasional QR code users are less alert

The survey shows that 1 in 14 Dutch people end up on a website via a QR code that they later regret visiting. Occasional users, who scan QR codes only a few times a year, run more risk per scan because they’re less likely to check where the link leads. Frequent scanners, on the other hand, are more likely to check the reliability of the code, the web address, and for any signs of tampering. Hendriks explains: “Scanning a QR code isn’t dangerous in itself, but you need to stay alert.” Not checking the link increases the chances of phishing or other types of fraud. That’s why it’s important to approach QR codes with caution and stay mindful.

Go ahead and scan a QR code, but check the link carefully

QR code fraud can happen anywhere – in the streets, in shops and restaurants, and through letters from official organisations. Earlier this year, the police warned about several fraudulent QR codes found in letters, emails, and on parking machines. For example, a fake letter pretending to be from a government agency instructed people to activate their digital ID verification, DigiD, through their bank account. Emails and cards in your letterbox with seemingly attractive offers that turn out to be fake are also circulating.

Hendriks explains: “Always check if the URL matches what you expect. For instance, a QR code from the Dutch tax authority should lead you to belastingdienst.nl, and nowhere else. If you’re unsure about a link – for example, if you’re on holiday or scanning a QR code from an unknown source – use the QR code scanner in the “Check je linkje” app, recommended by the police, to ensure it’s safe.”

Banks and QR codes

QR codes are playing an increasingly important role in payments. Banks use them for secure logins, among other things. A unique QR code appears on the login screen and is valid for only a short time, reducing the risk of misuse by third parties. Clients scan this code using the QR code scanner in the ABN AMRO app, after which they identify themselves with their personal code, fingerprint, or face recognition. Only after this identification do they gain access to their banking environment. This combination of a QR code and personal identification makes the login procedure more secure. According to ABN AMRO, QR codes are user-friendly and reliable, as long as users stay alert. That’s why you should always carefully check the source and details before making a payment.

You can find tips to avoid falling victim to QR code fraud at abnamro.nl/qr-codefraude.