Common QR Code Scams

What are QR codes?

QR codes are black and white machine-readable barcodes that use a smartphone’s camera for quick access to specific data. QR barcodes are frequently scanned by customers at businesses and institutions to complete a function or access important information. Here are examples: At a restaurant, the barcode allows people to preview the menu. At a museum, visitors may use the QR code to read and learn about a piece of art. And, at a store, customers may scan a QR code to pay for something. This technology is also being used in hospitals, in government, and in higher institutions of learning for specific purposes.

What’s the problem with them?

QR codes can be efficient, handy, and helpful when from a legitimate source. However, scammers are now discovering ways to tamper with QR codes for the purpose of swindling people. Scammers can create “fake” QR codes to redirect victims to malicious websites for the purpose of stealing identities, money, or causing harm to devices.

Bottom line: Once you scan an unsafe QR code, it has the potential to expose your phone’s personal information – giving scammers access to your device’s contents. Thus, use QR codes guardedly and only from 100% trustworthy sources. Also, discover ways to protect your accounts and devices.

Here are three common QR scam codes to watch out for:

QR code scam example one:

Here’s the scam: A person receives a small gift in the mail from an unknown sender. Inside the unsolicited package, there is a card featuring a QR code. The receiver of the gift thinks to scan the code out of curiosity in search of the origin/sender of the package.

Here’s what you should do: Should you receive an unsolicited gift with card containing a QR code, it’s potentially a scam. You may keep the gift, but don’t try to find the sender by scanning the QR code that came with it. Know this: Never scan a QR code from an unknown source as it puts you at risk.

QR code scam example two:

Here’s the scam: A person receives a letter from a large institution stating that there is overpayment to their account. To get a refund, they are instructed to use the QR code and follow the prompts.

Here’s what you should do: Check the letter over for clues that it is a phony. Phonies may feature generic language (e.g. Dear account holder…) or contain misspellings, awkward language, or punctuation problems. If you believe the letter is possibly accurate, contact the institution using a phone number that you have for them (NEVER use the phone numbers provided in the letter) to see if a refund is expected. Know this: Never scan a QR code from a random, unexpected letter saying you are entitled to money – as it is likely a scam! If you think it’s real, properly authenticate the letter to be certain.

QR code scam example three:

Here’s the scam: You go to use a parking meter. You see a curious-looking random QR code parking meter sticker for a quick-pay option. You are in a rush, so you are thinking about paying this way.

Here’s what you should do: Stop.Do not use the QR code stuck on the meter as it opens the potential for you to be scammed. Rather, install a parking meter app on your phone that you look up and know is dependable. Use this to pay for parking at airports and for street parking instead.

In each case above, the QR code is likely untrustworthy. It would be unwise to scan them.

QR codes are beneficial, but they also open opportunities for users of the codes to be diverted to phishing websites or have their devices infected with malware.

To be safe, always:

• Watch out for signs of QR code tampering (example a QR code taped on top of another).
• Do not scan QR codes from unknown sources. Also, do not open any links.
• Watch out for switched domain names that can take you to phishing websites.
• For safety, establish multifactor authentications and security for all your accounts.

For more information on QR code scams, click here to jump to our sister article. (Insert internal link)

Disclosure: This article is purely informational and is not intended as a substitute for professional advice.