Be careful with QR codes!

  • What did you think this QR code would do?

  • Did you notice the extra L in the link the QR code led you to (youthvilllages.org)?

  • While most smartphones will not immediately act on a QR code, it can be hard to tell what a QR code will do, where it will lead, or whether a criminal has replaced it with one of their own.
 


Tips to Protect Yourself

  • Once you scan a QR code, check the URL to make sure it is the intended site and looks authentic. A malicious domain name may be similar to the intended URL but with typos or a misplaced letter.

  • Practice caution when entering login, personal, or financial information from a site navigated to from a QR code.

  • If scanning a physical QR code, ensure the code has not been tampered with, such as with a sticker placed on top of the original code.

  • Do not download an app from a QR code. Use your phone's app store for a safer download.

  • If you receive an email stating a payment failed from a company you recently made a purchase with and the company states you can only complete the payment through a QR code, call the company to verify. Locate the company's phone number through a trusted site rather than a number provided in the email.

  • Do not download a QR code scanner app. This increases your risk of downloading malware onto your device. Most phones have a built-in scanner through the camera app.

  • If you receive a QR code that you believe to be from someone you know, reach out to them through a known number or address to verify that the code is from them.

  • Avoid making payments through a site navigated to from a QR code. Instead, manually enter a known and trusted URL to complete the payment.
Credit:FBI Internet Crime Compliance Center