Beware of QR Code Scams

Quick Response (QR) codes are helpful for storing and sharing information quickly, such as opening menus at a restaurant or linking to mobile payments for various bills. But as the usage of QR codes rises, so do the chances of scams and fraudulent activity.

What is Quishing? 

Quishing is the term for phishing attempts that use QR codes. Attackers like QR codes because they can direct unsuspecting victims to a malicious website or trick them into downloading malware.

Examples of Recent QR Code Scams

• Surprise packages:
  • Reports of receiving unexpected packages in the mail that only contain a QR code inside. These codes are often accompanied by text stating, “Scan this code to see your gift!” Once scanned, scammers gain access to that person’s device and any information saved to the device.
• Parking meter scams:
  • Scammers have recently started to put up false QR code parking signs over the official QR code. Unsuspecting victims will scan these fraudulent codes to try to pay for their parking online and unknowingly share access to their device, as well as any financial information they input to “pay” for parking.

Potential Fraud Indicators

It can be difficult to spot fraudulent QR code scams, but there are a few key items to look for before scanning any type of QR code:

• Misspellings and grammatical errors in the hyperlink address, company name or text accompanying the code.
• A shortened URL link.
• Unsolicited QR codes from unexpected, or unknown senders.
• Discoloration or changes in a company logo.
• QR code stickers placed on top of ads, or signage.
• Overseas investment opportunities requesting payments in bitcoin.

Keep Yourself Safe

• When possible, type in a physical website link into a web browser to prevent using a QR code.
• If you scan a QR code and it takes you to a website that looks concerning, exit out of the site immediately. Do not give any personal information.
• Only use a credit card when paying through a QR code. This prevents banking information from being shared and prevents the loss of money within a bank account.
• If you receive a code from a family member or a friend, ensure confirmation with that person over the phone, or in-person to confirm they meant to send it to you, or if they have been hacked.
• Be skeptical if a QR code looks tampered with, including if a new QR code is placed over an old one, if the advertisement creates urgency to scan, or if there is little information provided.

By following these tips, you can help protect yourself falling victim fraud. If you believe you are a victim of a scam, please report the attack to the Federal Trade Commission. 

Thank you for being a Third Federal customer. 

Back to Listing