Think Twice Before Scanning That QR Code

QR codes, those fuzzy black and white boxes that activate a URL when scanned by a phone camera, can be convenient. They make it easy to open websites, pay for parking, order food, and more.

But it's time to start treating any QR codes you see in public with a lot more skepticism. Their ease has made them a common tool for scammers seeking access to your personal devices and data.

Scammers sometimes may cover QR code stickers with fake ones on places like parking meters, restaurant tables, or street signs. Once you scan it, the code will take you to a phishing site or download malware to your phone. They may even trick you to make unintended payments.

How to protect yourself 

• Inspect before you scan: Look closely at physical QR codes, especially in public places. If the sticker looks uneven, tampered with, or placed awkwardly, skip it.
• Use a trusted QR scanner app with preview: Some smartphone apps show the URL before opening it, giving you a chance to back out if something looks suspicious. Instead of using your phone camera, use an app such as Google Lens, Trend Micro, or another trusted app.
• Look closely at the URL: If a scanned link looks strange or doesn't match the expected domain, exit immediately.
• Don't enter sensitive information: Never input banking login credentials, passwords, PINs, or other sensitive information after scanning a QR code unless you're 100% sure it's legitimate.
• Verify with the source: If a QR code comes from a business or service provider, visit their official website directly instead of scanning.