In an effort to minimize physical contact at businesses across the nation in response to the COVID-19 pandemic, many companies have turned to QR codes to guide customers to their apps, menus, events or package tracking services. However, BBB Scam Tracker is receiving reports of con artists who are using QR codes as a disguise to direct victims to malicious websites, prompting the user to input personal information or login credentials for the scammers to steal.
How the Scam Works
You encounter a QR code through an email, direct message on social media, text message, flyer or other marketing material that appears legitimate. After scanning the code with your phone’s camera, it may direct you to a phishing website and request the user to provide basic information to access content. Other times, con artists use QR code to automatically launch payment apps or follow a malicious social media account.