---
title: "Think Before You Scan: How to Spot QR Code Scams"
description: Learn how to protect yourself from QR code scams like quishing and brushing. Stay alert and keep your personal information safe with these essential tips from Heartland Bank.
---

[News & Stories ](https://www.myheartland.bank/blog)

# [Think Before You Scan: How to Spot QR Code Scams](https://www.myheartland.bank/blog/think-before-you-scan-how-to-spot-qr-code-scams-quishing-brushing)

 Written by [Heartland Bank](https://www.myheartland.bank/blog/author/heartland-bank) | 9/26/25 2:49 PM

QR codes are everywhere, on restaurant menus, parking garages, advertisements, packages, and even emails. They’re convenient, but they’ve also become a tool for scammers.

Have you ever scanned a QR code and landed on a strange website? Or maybe you’ve received a text or email urging you to scan a code right away? If so, be careful, you could be walking right into a scam known as **quishing**.

READ MORE | [Scammers hide harmful link in QR codes to steal information](https://consumer.ftc.gov/consumer-alerts/2023/12/scammers-hide-harmful-links-qr-codes-steal-your-information)

**What is Quishing?**  
Quishing, short for *QR code phishing*, is when scammers use QR codes to trick people into giving up sensitive personal or financial information. They may:

- Post fake QR codes in public places
- Send them in emails or text messages
- Include them on packages with a “special offer” or “gift registration.”
- Even post fake codes over the real ones

Once scanned, the QR code takes you to a spoofed website that may look legitimate: a bank, a government agency, or a well-known company. But behind the scenes, scammers are trying to collect your personal data.

**Brushing Scams: Another QR Code Trap**  
Some criminals take it further with a tactic called **brushing**. You might receive an unsolicited package with a small gift and a card asking you to scan a QR code to learn more. If you do, you’ll be taken to another fake site that asks for private information.

**What They’re After**  
Scammers want personally identifiable information (PII) like:

- Account usernames and passwords
- Social Security numbers
- Dates of birth
- Credit and debit card details
- PINs and other sensitive data

With this information, they can commit identity theft or financial fraud.

**Stay Safe**

- Never scan QR codes from unknown sources.
- If a code takes you to a login page, stop and verify before entering any details.
- When in doubt, go directly to the official website instead of using a QR code link.

By staying alert, you can enjoy the convenience of QR codes without falling victim to quishing scams.

[View full post](https://www.myheartland.bank/blog/think-before-you-scan-how-to-spot-qr-code-scams-quishing-brushing)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Heartland Bank"
  },
  "dateModified" : "2025-09-26T14:49:48.465Z",
  "datePublished" : "2025-09-26T14:49:48Z",
  "headline" : "Think Before You Scan: How to Spot QR Code Scams",
  "image" : {
    "@type" : "ImageObject",
    "height" : 627,
    "url" : "https://664669.fs1.hubspotusercontent-na1.net/hubfs/664669/Blog%20Banner-3.jpg",
    "width" : 1200
  },
  "mainEntityOfPage" : "https://www.myheartland.bank/blog/think-before-you-scan-how-to-spot-qr-code-scams-quishing-brushing",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60,
      "url" : "/hs/hsstatic/content_shared_assets/static-1.4092/img/default-amp-logo.png",
      "width" : 60
    },
    "name" : "News & Stories"
  }
}
```