QR Code Scams: What to Check Before You Scan
QR codes make it easy to hide a malicious link in plain sight. Here's what to check before scanning one.
A QR code can point anywhere, and because the destination is invisible until scanned, attackers have started placing fake codes over legitimate ones in public places like parking meters and restaurant tables.
Why QR codes are an appealing target
Unlike a suspicious link in an email, a QR code offers no visible text to scrutinize beforehand, and most people scan them with an implicit trust that doesn't extend to clicking an unfamiliar link directly.
What to actually check before scanning
Looking for signs of tampering, like a sticker placed over the original code, checking the URL preview most phone cameras show before opening a link, and avoiding entering payment or login details on a page reached through a QR code in an unfamiliar public location are all reasonable precautions.