The FBI and the Better Business Bureau (BBB) are issuing urgent warnings about a growing trend of scams utilizing QR codes, particularly those found on packages delivered to homes. These codes, often disguised as legitimate links, can lead unsuspecting individuals to fraudulent websites, resulting in financial loss and compromised personal information.
Key Takeaways
- Beware of unsolicited packages, especially those lacking sender information.
- Exercise extreme caution before scanning QR codes from unknown or suspicious origins.
- Never authorize phone permissions or grant access to websites and applications without verifying their legitimacy.
- If you suspect you’ve been a victim of a "brushing scam" (receiving unordered packages), secure your online accounts and monitor your credit reports.
The Evolving Threat of QR Code Scams
Criminals are continuously adapting their methods to exploit consumers, and QR codes have become a new vector for these attacks. While QR codes offer convenience for legitimate businesses, scammers are leveraging them to trick people into visiting malicious sites or downloading harmful software. These scams can manifest in various ways, from fake payment portals for parking meters to phishing attempts disguised as urgent government or utility notices.
How Scammers Are Using QR Codes
Scammers are employing QR codes in several deceptive ways:
- Fake Payment Sites: Stickers with fraudulent QR codes are placed on parking meters, directing drivers to fake payment portals where their money is stolen.
- Cryptocurrency and Romance Scams: After building trust, scammers may send QR codes that link to fake cryptocurrency wallets, encouraging victims to invest.
- Phishing and Malware: Scanning a QR code can lead to a phishing website designed to steal personal information or download malware that compromises a device.
- Impersonation: Scammers pose as government agencies or utility companies, using QR codes to direct victims to fake payment portals for supposed urgent dues.
- Building False Legitimacy: Some scams start with a genuine QR code to build trust before presenting a fraudulent one for personal information or payment.
Protecting Yourself from QR Code Scams
Consumers can take several precautions to avoid falling victim:
- Verify the Source: Before scanning, confirm the QR code’s origin. If received via text or social media, verify with the sender that they intended to send it.
- Avoid Unsolicited Links: Do not scan QR codes from unknown senders, especially if they promise exciting gifts or investment opportunities.
- Be Wary of Short Links: If a shortened URL appears when hovering over a QR code, be cautious, as it can obscure the true destination.
- Check for Tampering: Inspect QR codes for any signs of alteration or stickers placed over legitimate codes.
- Secure Your Devices: Be cautious about granting app permissions or website access after scanning a QR code.
If you believe you have been targeted or victimized by a QR code scam, report it to the FBI’s Internet Crime Complaint Center (IC3) or the BBB Scam Tracker.
