Sharing QR Codes Risks Fraud and Data Theft, Taiwan Warns

Taiwan's Cybersecurity Administration (CSA) is alerting the public to the significant security risks associated with sharing QR codes, particularly those found on event tickets, travel documents, and payment platforms. These seemingly simple graphic symbols can contain sensitive personal and financial information, making them a new frontier for cyber fraud.

According to CSA Director-General Tsai Fu-lung, QR codes on flight tickets can reveal booking details such as passenger names, flight information, and reservation codes. This data can be exploited by hackers to modify travel plans or even deny boarding. For concert tickets, shared QR codes have been used to generate counterfeit tickets, leading to situations where legitimate ticket holders are denied entry after fraudsters use the code first.

The risks extend to payment QR codes, like TWQR, which function similarly to credit card numbers or bank account details. Criminals can quickly use compromised payment QR codes to purchase goods, such as game credits, directly from victims' accounts. The CSA strongly advises against displaying or sharing any QR code, emphasizing that doing so is akin to exposing personal identification or financial credentials, potentially leading to data leaks and compromised rights.

“

QR codes, like credit card numbers, should not be casually displayed or shared with others. Avoid letting others photograph, record, or share the screen, otherwise it is like revealing your personal information or important rights information, which may not only cause data leakage, but also lead to the loss of your own rights.