They are probably one of the best inventions in years, but it seems QR codes can offer up a nasty surprise. These scannable images can be found almost everywhere, allowing Android and iPhone users to quickly find websites, download apps, pay for parking, and even enter competitions by simply hovering their smartphone camera over them. They save loads of time and hassle, but it appears there is a darker side to QR codes, with millions thought to have been targeted by fake versions which attempt to steal data.

One of the most concerning new scams is called “brushing”. This is where a parcel or package is sent to homes that includes a fake QR Code. Recipients are then urged to scan it to find out who the package is from or return it to the sender.

Sadly, those tricked can end up handing over personal information to cyber crooks, which can then be used to steal money.

Recent research from cybersecurity company NordVPN confirmed the worrying trend is continuing to rise, with the team saying that over 26 million people may have unknowingly been lured to malicious websites via these fake QR codes.

“QR codes have become a silent gateway for cybercriminals. Unlike traditional phishing emails where we’ve learned to spot red flags, a physical QR code feels inherently trustworthy,” says Marijus Briedis, chief technology officer at NordVPN.

“Treat every unexpected QR code with the same suspicion you would treat a link from an unknown sender in your inbox.”

If you are concerned about scanning things on your phone, there are some simple new rules to follow with NordVPN offering these tips.

4 TOP TIPS TO STAY SAFE FROM QR CODE SCAMS

• Before you scan a QR code, make sure you know where it came from. Is it from a business you trust or someone you don’t recognise? If you’re unsure, don’t scan it. Reach out to the sender through their official contact information.

• Most smartphones let you see a link to a website before you open it. Take advantage of this feature. If the link looks odd or isn’t what you expected, don’t continue.

• Make sure your phone’s security software is always up to date. Use a VPN when browsing the internet. These steps help protect you from dangerous websites and data theft, even if you accidentally open a harmful site.

• Help your friends and family stay safe by sharing these tips, especially with anyone who isn’t very comfortable with technology. Scammers often go after people who don’t know about these tricks.

Yes, QR codes make life simple, but the advice is clear. Be careful before you scan anything on your smartphone and don’t hand over personal data without checking who is behind the code.