In Cuba they warn of scams using QR payments

A new form of fraud has become popular in Cuba in recent months. This is theft through QR code payments, an alternative widely used these days in terms of banking on the island. Following the Cuban government’s recent actions regarding the use of payment gateways Enzona and Transfermóvil, government and private companies have adopted this type of payment. According to the local newspaper Granma The most commonly used method of fraud is quishing, which means a combination of the word phishing and the abbreviation QR. This is exactly the exact concept of phishing attacks using QR codes.

If stolen with these features, the code could take the user to a fake website. Once there, you will be asked to enter personal data, for example, usernames, passwords, and credit card numbers. There have been many cases where QR can also start downloading malware onto the device without the owner realizing it.

This type of fraud is relatively new in Cuba, but it is deeply rooted throughout the world. In fact, several reports from Check Point Software, based on data from September and October 2023, show that the incidence of phishing globally has risen by 587%.

Tips to avoid being scammed by phishing

The first thing to keep in mind is not to scan QR codes from unknown sources. If one arrives by mail or letter, make sure the sender is legitimate. Automatically check the URL, make sure the address is the expected one and, above all, that it uses HTTPS for connection security.

Another suggestion is to use a reliable QR scanner, which detects and blocks malicious links. At the same time, don’t forget to update your software in general. Never provide personal information to a fake or unverified site.

One important element is that you install a security solution, this way you will avoid automatic malicious downloads. Share with your family and friends every step you have taken for your safety. Finally, report suspicious attempts. For example, if you find a QR code that is part of a phishing attempt, report it immediately.