QR code scams are duping millions of Americans as crooks plant malicious codes in public spaces and online messages to hijack personal data and empty wallets. If you’re unaware of the red flags you might unknowingly scan a fake code that redirects you to a website designed to steal sensitive information, install malware, or trick you into making fraudulent payments.
Develop these 6 habits to help you spot fake barcodes and avoid getting pixelated by fraudsters.
1. Check Your Surroundings Before You Scan
Look closely at where the QR code is placed and how it's displayed. Be cautious if a QR code sticker is covering another code or looks out of place compared to the rest of the signage. Be suspicious of codes that appear to be stickers placed over existing ones, especially on parking meters, restaurant tables, or public signs. Scammers often paste fake codes over real ones to send you to their phony websites.
2. Question Utility and Service Payment Demands
When QR codes claim to be from utility companies, internet providers, or other services demanding immediate payment to avoid disconnection, pause and verify independently. Call the company at the phone number on your official bill. Never respond using the contact information provided in the message. Service providers follow strict procedures before disconnecting anything, usually sending multiple written notices and offering payment plans. They don't typically combine QR codes with threats of same-day shutoffs.
3. Preview the Destination Before You Proceed
Most smartphones show you where a QR code will take you before actually opening the website. Take a moment to read this preview rather than automatically tapping to proceed. Professional businesses typically use web addresses that clearly mirror their company name. Be especially wary of shortened URLs with random characters or addresses that don't match where you expect to visit.
4. Avoid QR Codes in Unsolicited Messages
If you receive a QR code through text, email, or social media from someone claiming to be your bank, utility company, or government agency, don't scan it. Scammers frequently send these messages with urgent language like “Pending account closure” or “Immediate action required.” Trusted organizations rarely send QR codes through these channels for account issues or payments. When in doubt, make contact directly using the official website or phone number.
5. Never Make Cash Payments at Retail Locations
If scanning a QR code leads to instructions to pay cash at a drugstore, convenience store, or other retail location, especially if the message is unexpected or urgent – STOP! This is a common scam tactic because once you hand over cash, the money is untraceable and can’t be recovered. Legitimate companies rarely (if ever) ask you to make an in person cash payment triggered by a QR code. Instead, they use secure payment channels such as bank transfers, credit cards, or their own official online portals.
6. Keep Your Phone Updated
Use your smartphone's native camera app rather than downloading third-party QR scanning apps from unknown developers. Stick with your phone’s built in scanner or only use trusted third-party apps from official app stores. If your phone displays any kind of alert after scanning, listen to that warning and don't proceed. These security features are regularly updated to help protect against new types of fraud. Even with built in scanners, always visually inspect the link preview before tapping.
Remember that scammers constantly change their tactics to catch people off guard. Stay up-to-date by exploring our fraud prevention resources which detail more ways to keep your money secure and your financial future bright.
