Technology experts warning residents of 6 increasingly common QR code scams

QR codes have become very common in everyday life, and unfortunately, so have QR code scams.

The codes are a valuable promotional tool because of how easy they are to set up and share, but according to experts, that ease of access makes QR codes a prime target for scammers, who deceive users into visiting malicious sites or downloading malware onto their devices.

According to the CEO of technology service QR Code Developer , Kushal Tantry, there are six emerging QR code scams in particular that are affecting people worldwide, including one that affected a Southern California community.

Parking information and payment scams

According to Tantry, parking information and payment scams are among the most common in both the U.S. and the United Kingdom. These involve scammers placing fake QR codes onto parking meters or information signs that direct users to an official-looking website that is actually designed to steal credit card information.

This exact type of scam was uncovered in late August in Redondo Beach ; approximately 150 parking meters along the Esplanade and Riviera Village areas were found to have fraudulent QR code stickers on them, according to local authorities.

The fake stickers were promptly removed by Redondo Beach police.

Individuals are recommended to avoid paying through QR codes whenever possible, especially in public places.

“If the fake code is covering up a real QR code in that location, check if the URL is secure and what you would expect to see,” Tantry said. “Any spelling or grammar errors on the actual site can also determine if it might have been created by scammers.”

Posters and information board scams

Another common place to find QR codes is on posters and information boards. Schemes like these target unsuspecting tourists or locals looking for further details from an advertisement, but instead of getting the actual information, they are directed to a fraudulent website or asked to download malware.

“Fake QR codes in public places may be found on posters or information boards, especially in town or city centers during the summer season when many events are taking place,” Tantry said. “Check if the code is a sticker that might be covering up and replacing an existing code underneath…it might have been placed in a strange way compared to the rest of the advertisement, showing the code could have been stuck on afterwards.”

Social media message scams

QR codes are all over social media sites. Hackers that are able to gain access to accounts can send messages to friends and family members containing QR codes in an attempt to get them to scan it and steal their information, experts say.

To combat this type of scam, individuals are urged to treat requests like these with caution, especially if they are out of the ordinary.

“These messages are likely to be worded differently from how the person normally replies or could come from someone you have not spoken to in a long time,” Tantry noted. “If you think someone might have been hacked, be sure to message or call them on their mobile number to verify if these messages are legitimate.”

Phishing email scams

Although some may consider phishing email scams common and easy to spot, scammers have turned to QR codes because “people often fail to recognize that scanning these codes can be just as risky as clicking on links contained within unsolicited emails,” Tantry said.

The QR Code Developer CEO added that a prime example of a scam like this is a fake email from a well-known retailer containing a code pertaining to a failed transaction.

“Avoid interacting any further with the email or sender if emails mention failed orders, purchases or unknown accounts,” he stated. “Make sure to check the email addresses for spelling mistakes or errors and contact the company directly through their website if unsure.”

Physical mail and package scams

In addition to porch pirates, individuals are also urged to watch out for QR codes that involve physical pieces of mail and packages.

“Any advice around unsolicited emails can be applied to anything you might receive in the mail, such as letters or packages,” Tantry said. “Scammers can use bogus letters to trick you into scanning a QR code through surveys, competitions or tracking a supposed order.”

“It is unlikely that many legitimate companies would send you a QR code this way,” he added.

According to Tantry, mail used for scams may contain urgent or threatening language to get individuals to act quickly or incentivize them by offering non-existent rewards. If the mail appears to come from a recognizable company, check their website when signed into your official account or contact them directly.

QR code scanner app scams

Most of the time, phone users looking to scan a QR code can do so simply by using their phone’s built-in camera, but other times, scammers will actually try to fool individuals into downloading a fake scanner app that can steal data and personal details.

A dead giveaway of these phony apps, Tantry said, is if they immediately ask to download a “sizeable” update after being installed, as that is likely the malware the scammer wants the user to download.

“Be careful when downloading any scanner apps that have strange reviews or have received a lot of ratings in a short space of time,” Tantry recommended. “Use official online stores when searching for new apps and check to see if they request permissions that seem extensive for what is needed, such as controlling your screen.”

Government officials are aware of the alarming trend; the Federal Trade Commission issued a Consumer Alert in Dec. 2023 warning Americans that scammers are using fake QR codes and outlined steps to avoid being scammed.

Additionally, the Social Security Administration has released a list of steps one can take to protect themselves from QR code fraud.

For the latest news, weather, sports, and streaming video, head to KTLA.