QR Codes Warning as Scammers Strike

KANSAS CITY, Mo. — QR codes have been popular in other countries for years, providing everything from menus to event tickets and critical information.

As those square QR codes are becoming more popular in the US, federal investigators are warning that scammers are also becoming interested in profiting from them.

The FBI warns scammers are using QR codes to try to redirect people to malicious websites. Those sites cam then steal login and financial information. 

Scammers can also use the codes to trick people into thinking they are paying through a site, but end up actually paying the thief.

How to Apply to Travel to Bermuda

Most QR codes are legit. Businesses use them to provide contactless access to menus, promotions, business hours, and anything else you can imagine.

While the codes are incredibly convenient to use, the FBI warns legitimate QR codes are also easy to replicate and replace with fake ones. You may not even realize what’s happened until its too late.

After scanning what is believed to be a legit QR code, the scammer’s code will likely prompt the user to login and add financial information. As soon as that happens, scammers have the ability to potentially steal money through the account.

Why you shouldn’t wait to get, renew your passport

The malicious QR codes may also contain embedded malware, allowing a criminal to gain access to the victim’s mobile device and steal the victim’s location as well as personal and financial information.

Keeping in mind that most QR codes are legit, the FBI said there are steps you can take to protect yourself.

TIPS TO PROTECT YOURSELF

• Don’t download a QR code scanner app. The FBI said it increases your risk of downloading malware onto your device. Most phones have a built-in scanner through the camera app.
• Once you scan a QR code, check the URL to make sure it is the right site and looks authentic. A malicious domain name may be similar to the intended URL but with typos or a misplaced letter.
• Use caution when entering login, personal, or financial information from a site navigated to from a QR code.
• If scanning a physical QR code, make sure no one’s placed a sticker on top of the original code.
• Do not download an app from a QR code.
• Use your phone’s app store for a safer download.
• If you receive an email stating a payment failed from a company you recently made a purchase with and the company states you can only complete the payment through a QR code, call the company to verify. Locate the company’s phone number through a trusted site rather than a number provided in the email.
• If you receive a QR code that you believe to be from someone you know, reach out to them through a known number or address to verify that the code is from them.
• Avoid making payments through a site navigated to from a QR code. Instead, manually enter a known and trusted URL to complete the payment.

As always, if you believe you have been a victim, report the fraud to the FBI Internet Crime Complaint Center. 

Get Travel Updates Right to Your Inbox!