Beware: Scanning Unknown QR Codes Risks Cross-Border Charges, Front Accounts.

The Criminal Investigation Bureau issued a major public safety alert today, offering a detailed analysis of the increasingly rampant online fraud tactics. Police highlighted that fraud rings continually refine their schemes, with the most insidious being a double‑layered scam that combines “fake online marketplaces” with “fake customer‑service” operations. Many consumers, while shopping online or seeking help from customer support, have unknowingly scanned QR codes from suspicious sources at the behest of attackers. This seemingly simple action can expose them to significant financial risk, including inadvertent small cross‑border charges on foreign platforms and, more seriously, the possibility of having their personal bank accounts turned into money‑laundering shell accounts, subject to legal investigation and freezing.

The core of these scams typically begins with counterfeit transactions on e‑commerce sites. Fraudsters advertise popular items on social media, auction sites, or messaging apps, luring buyers with low prices or rare goods. When a consumer places a bid or messages for more information, the perpetrator claims a “system error,” that the store is not yet open, that real‑name verification is required, or that a dispute needs customer‑service contact. These excuses lead victims to a self‑made fake customer‑service webpage. On these almost authentic interfaces, the fraudster then requests personal details or sends a QR code, claiming that scanning it will complete verification, cancel installment payments, or initiate a refund.

When victims follow the instructions and scan the QR code, the danger unfolds. According to the bureau’s analysis, these malicious QR codes are hosted on overseas servers and link to phishing sites or malware. The victim’s phone may unknowingly grant third‑party payment permissions or bind a credit card. This allows attackers to easily conduct cross‑border purchases, steal card information, and carry out fraudulent transactions. Worse, if the victim further complies with the fake customer‑service demands—entering online banking usernames, passwords, verification codes, or handing over their financial account for “fund verification”—the account is immediately exploited as a conduit for illicit funds.

The social impact of this crime is severe because it cleverly exploits modern trust in mobile payments and instant messaging. With smartphones ubiquitous and QR codes widely used for restaurant orders, transit tickets, and mobile payments, people have lost vigilance when scanning barcodes. Fraudsters have turned this convenient technology into a tool for theft. When consumers discover unexplained deductions or receive bank notices that their accounts have been frozen due to fraud alerts, it is often too late; the money is difficult to recover, and they must spend considerable time and effort proving their innocence to the courts, enduring significant psychological stress.

In light of the ever‑evolving technology‑driven crime, the Criminal Investigation Bureau urges the public to remain alert and develop proper cybersecurity awareness. When shopping online, choose official platforms with secure transaction mechanisms and avoid private transactions via messaging apps with unknown sellers. Most importantly, treat any unknown URLs, text messages, or requests that require scanning a QR code to resolve financial disputes, refunds, or account verification with high suspicion, adhering to the “no click, no scan, no provide” principle. If you suspect a scam, immediately call the 165 anti‑fraud hotline for verification or seek police assistance to protect your assets and legal rights.