QR codes have become a popular medium for quickly accessing information. Their name (quick response) harkens to their ability to allow users to pull up websites or files in no time. These black and white, Rorschach test-esque squares are extremely convenient. You may have used them at a restaurant to pull up a menu, or maybe scanned one on a product’s packaging to pull up more information. The convenience of QR codes is their biggest attribute, but also the thing that makes them dangerous. As with anything popular, scammers are using QR codes to steal your info. 

What is a QR code and how do they work?

A QR code is a black and white square, each with a unique pattern of blocks and lines, which will lead to a designated website or file. Most current smartphones have a built-in app for scanning QR codes, or you can use your phone’s camera to scan the code. Once the code is scanned, a URL will appear on your screen. You can then click this link to go to the webpage embedded in the code. 

QR codes seem like futuristic technology, but anyone can create one and scammers are using this to their advantage. The Federal Trade Commission (FTC) has recently alerted Americans to scams using QR codes and these scams have even been given a name: quishing.

What should I look out for when using QR codes?

• Always inspect the URL associated with the code. When you scan a QR code, make sure you vet the link before clicking on it. Do you notice anything suspicious? Are there any misspellings or letters out of order? 
• Check to ensure the code hasn’t been tampered with. If you need to scan a QR code, let’s say to pay for public parking, make sure you check for signs of tampering. Scammers may create their own QR code, print them on stickers, and place them on top of existing codes. While you think you’re legitimately paying for parking, you may be giving money to a scam.
• Never scan a code in an unsolicited text or email that asks to you act quickly. Anytime you’re asked to do something quickly, this can be a red flag that something shady is afoot. If you think the message is legitimate, contact the sender through their official website or phone number – not through the QR code. 
• Keep your phone’s operating system up-to-date. Your phone is frequently notifying you of new updates that need to be installed. These are updates to the phone’s operating system. While you may see changes to the features you use, most of these updates are to upgrade security features. Cell phone manufacturers must constantly be on top of the latest scams and update operating systems to combat them. It’s important that you install these updates when they’re released so that your phone is protected against the latest vulnerabilities. 

Scammers are using QR codes to steal your info, but this doesn’t mean you have to let them have it. Use these tips to protect yourself and you will be able to safely use QR codes and the convenience they offer.