Scammers are hiding harming links in QR codes to steal personal information. The Federal Trade Commission warns us to be cautious scanning any QR code.
How a typical QR code scam might look
Scammers are mailing packages (not sure how they are selecting their targets) that have a QR code somewhere on the box. The recipient gets the mystery package and has no clue what is inside or where it came from, so they scan the QR code to get more information. Unfortunately, the QR code tries to install a virus on their cellphone.
As a reminder, be very cautious scanning any QR codes.
- If you see a QR code in an unexpected place, inspect the URL before you open it. If it looks like a URL you recognize, make sure it is not spoofed — look for misspellings or a switched letter.
- Do not scan a QR code in an unsolicited email or text message you were not expecting — especially if it urges you to act immediately. If you think the message is legitimate, use a phone number or website you know is real to contact the company.
- Protect your phone and accounts. Update your phone’s Operating System to protect against hackers and protect your online accounts with strong passwords and multi-factor authentication.
Read more about QR code scams from the Federal Trade Commission.