THE SHORT VERSION
Before you open a QR code, look at the web address it shows. Skip codes that arrive in unexpected messages, and go to the company’s website yourself instead.
A familiar situation
Imagine an email says your account needs attention and offers a QR code to scan with your phone. It looks tidy and official. The code itself tells you nothing about where it leads until you look at the address.
1. Look at the address before you open it
When your camera reads a code, most phones show the web address first. The FTC suggests checking it before you open it. Look for misspellings or a switched letter in a name you know.
2. Be wary of codes you didn’t expect
Don’t scan a code from an email or text you weren’t expecting, especially one that pushes you to act right away. A code in a message carries the same risk as a link in a message.
3. Check through a route you trust
If the message might be real, contact the company using a website or phone number you already know is genuine. Keep your phone updated and use strong passwords and multi-factor sign-in on your accounts.
One thing to try today
Point your phone’s camera at a QR code you trust, such as one on a product box, and notice where the web address appears before you tap anything.
Read more from trusted sources
General educational guidance. If you believe someone has stolen your information or money, use the official recovery guidance at IdentityTheft.gov or ReportFraud.ftc.gov.
Pass a useful tip along.
Share the guide or copy its short takeaway for your own post.
LinkedIn
X
Reddit