You probably see QR codes everywhere from menus to parking meters, and you’ve likely used one as a ticket to a concert or sporting event.
But of course, anything that popular is going to be a target for those who want some easy money.
The Federal Trade Commission says scammers are hiding harmful links in QR codes to steal personal information.
Some crafty scammers might send you a QR code by text message or email and make up a reason for you to scan it. Or they might be covering up public QR codes with ones of their own.
The FTC says these are some of the ways they try to con you:
- They lie and say they couldn’t deliver your package and you need to contact them to reschedule
- They pretend like there’s a problem with your account and you need to confirm your information
- They lie, saying they noticed suspicious activity on your account, and you need to change your password
The FTC warns that all these lies are meant to create a sense of urgency. The scammers want you to scan the QR code and open the URL without thinking about it.
A scammer’s QR code could take you to a spoofed site that looks real but isn’t. And if you log in to the spoofed site, the scammers could steal any information you enter. Or the QR code could install malware that steals your information before you realize it.
So how can you protect yourself?
- If you see a QR code in an unexpected place, inspect the URL before you open it. If it looks like a URL you recognize, make sure it’s not spoofed — look for misspellings or a switched letter.
- Don’t scan a QR code in an email or text message you weren’t expecting — especially if it urges you to act immediately. If you think the message is legitimate, use a phone number or website you know is real to contact the company.
- Protect your phone and accounts. Update your phone’s OS to protect against hackers and protect your online accounts with strong passwords and multi-factor authentication.