False claim of 'bank funds drained in 5 seconds after QR code scan' sparks concern

A viral video circulating on Facebook has raised concerns after falsely claiming that VND100 million (US$3,900) was stolen in five seconds after scanning a QR code. The video, posted on January 14, shows a woman narrating an incident where a customer mistakenly transferred VND10 million instead of VND1 million to her husband. She says the customer then provided a QR code with their bank details and asked him to return the excess amount. After scanning the code, her husband’s phone froze, and when it unfroze, he found VND100 million missing from his bank account, according to her account.

The video quickly gained traction, amassing over 1.6 million views, 3,500 likes, and 23,000 shares. Many viewers expressed concern, with one commenter warning that scammers were becoming more sophisticated, moving from using links and emails to QR codes.

However, several viewers raised doubts about the story's credibility. Thanh Dang, a Facebook user, questioned why biometric authentication, such as facial recognition, wasn’t triggered for the VND100 million transfer, noting that transfers over VND10 million typically require such verification. Another user, Nguyen Hung, pointed out that banking systems generally require multiple verification steps for large transactions, suggesting that the video was likely clickbait.

Cybersecurity experts have also debunked the claim. Vu Ngoc Son, chief technology officer at the National Cyber Security Technology Corporation, explained that scanning a QR code or copying an account number does not directly result in financial loss. QR codes typically encode data like links or bank account details, and any risk arises from how users interact with the content after scanning. The real danger comes from clicking on fraudulent links, installing malicious software, or transferring funds to a scam account.

Son warned against spreading unverified information, emphasizing that sensationalized rumors often cause unnecessary panic. "People share these claims out of fear or the desire to protect others, which amplifies their reach uncontrollably," he said. He also pointed out that some individuals might even use fake warnings as bait to lure users into real scams.

To combat misinformation, Son advised users to verify information through official sources like government or bank websites, reputable media outlets, or trusted cybersecurity firms. He cautioned that false claims could be as harmful as real fraud, potentially undermining trust in digital transactions and hindering businesses’ digital transformation efforts.