Think Before You Scan: How to Spot QR Code Scams

QR codes are everywhere, on restaurant menus, parking garages, advertisements, packages, and even emails. They’re convenient, but they’ve also become a tool for scammers.

Have you ever scanned a QR code and landed on a strange website? Or maybe you’ve received a text or email urging you to scan a code right away? If so, be careful, you could be walking right into a scam known as quishing.

READ MORE | Scammers hide harmful link in QR codes to steal information

What is Quishing?
Quishing, short for QR code phishing, is when scammers use QR codes to trick people into giving up sensitive personal or financial information. They may:

• Post fake QR codes in public places
• Send them in emails or text messages
• Include them on packages with a “special offer” or “gift registration.”
• Even post fake codes over the real ones

Once scanned, the QR code takes you to a spoofed website that may look legitimate: a bank, a government agency, or a well-known company. But behind the scenes, scammers are trying to collect your personal data.

Brushing Scams: Another QR Code Trap
Some criminals take it further with a tactic called brushing. You might receive an unsolicited package with a small gift and a card asking you to scan a QR code to learn more. If you do, you’ll be taken to another fake site that asks for private information.

What They’re After
Scammers want personally identifiable information (PII) like:

• Account usernames and passwords
• Social Security numbers
• Dates of birth
• Credit and debit card details
• PINs and other sensitive data

With this information, they can commit identity theft or financial fraud.

Stay Safe

• Never scan QR codes from unknown sources.
• If a code takes you to a login page, stop and verify before entering any details.
• When in doubt, go directly to the official website instead of using a QR code link.

By staying alert, you can enjoy the convenience of QR codes without falling victim to quishing scams.