Can scanning a QR code be a scam?
Yes. Scammers place fake QR codes on parking meters, flyers, packages, and emails so that scanning them opens a fake payment or login page — this is called quishing.
What it is
A malicious QR code that, when scanned, sends you to a fraudulent website designed to steal your login, card details, or payment — often stuck over a legitimate code or sent in a message.
How to spot it
A QR code arrives unexpectedly by text, email, or on a package slip.
A sticker QR code is placed over another one on a meter or sign.
Scanning it asks you to log in or pay right away.
The web address that opens doesn't match the real company.
What to do
Don't scan QR codes from unexpected messages or ones that look stuck on. Type the company's known web address yourself instead of trusting the code.
When in doubt, slow down. A real credit union, business, or agency is fine with you hanging up and calling back on a number you look up yourself.