Security alert: QR code scams

Campus Security Services alert for students

QR codes are everywhere now – from menus and payments to campus posters and event check‑ins – which makes them a growing target for scammers.

Although most QR codes are safe, criminals can easily replace or tamper with them to steal personal information, banking details, or even install malware on your device. 

How QR code scams work:

Scammers create fake QR codes or place stickers over real ones in public spaces like parking meters, bulletin boards, transit stops, or posters. When scanned, these codes may: 

• send you to a fake website that asks for personal or banking information
• redirect you to a fraudulent payment system
• install malware that captures passwords or sensitive data
• trick you into thinking you'll receive money, when the QR code actually withdraws it. 

Many scams try to create urgency (e.g., wording like "pay now," "limited time," or "account suspended", etc.) to get you to scan quickly without thinking. 

How to protect yourself:

You don't need to stop using QR codes altogether; just scan with caution. 

📱 Here are some tips to help. 

1. Inspect before you scan. Check for signs of tampering. If a QR code looks like a sticker placed over another code, misaligned, or out of place, do not scan it. Scratching lightly with your fingernail can help you detect a pasted-over sticker. 

2. Be cautious of public QR codes. Avoid scanning codes found in random locations like lampposts, garbage cans, random bulletin boards, or homemade posters. When in doubt, skip it. 

3. Verify the source. If a QR code claims to link to a campus service, event, or payment page, confirm with staff or search the organization's official website manually. Do not rely on the QR code alone. 

4. Preview before you tap. Most phones show the URL after scanning but before opening. 

• Check for spelling errors, strange domains, or anything unexpected
• A safe site should begin with https://
• If it looks suspicious, close the window immediately.

5. Strengthen your phone's security. Keep your device's operating system updated, install a reputable antivirus app, and consider using a trusted scanner app that previews the full link before opening it. 

If you think you scanned a malicious QR code:

Close the site immediately, avoid entering any information, and do not open downloaded files. Reset any passwords you may have shared and monitor your accounts for unusual activity. 

Report suspicious behaviour

Please report any signs of suspicious activity to Campus Security Services. You may also choose to report them to the Canadian Anti-Fraud Centre (online at https://antifraudcentre-centreantifraude.ca or call 1-888-495-8501). 

If you're unsure what to do, contact Campus Security Services:

📞 519‑452‑4400 

📍 D1027, Green Zone, London Campus (1001 Fanshawe College Blvd.) 

📧 security@fanshawec.ca 

Your safety matters. Take a moment before you scan. If something feels off, trust your instincts. It is always better to double-check than to fall victim to a scam.