QR codes have become a convenient way to order food, pay for parking, or get quick information, but that convenience also makes many people vulnerable to fraud. Cybersecurity specialist Joseph Steinberg warns that scammers are increasingly using QR codes to direct users to fake login pages, steal personal data, or install malware.

Why QR codes can be dangerous

Unlike a traditional hyperlink, a QR code hides its destination behind a pattern of squares. “Phishing is where the link takes you to a site that looks legitimate. A QR code can do exactly the same thing,” Steinberg explains. “You can’t see the URL before you scan, so you can’t verify whether the site is trustworthy.”

Recent surge in QR‑code phishing

Microsoft’s recent security report shows a sharp rise in QR‑code phishing attacks, jumping from 7.6 million incidents in January to 18.7 million by March of this year. The rapid increase underscores how quickly scammers are adopting this method.

Practical steps before you scan

Steinberg offers a short checklist to help you avoid falling victim:

• Inspect the code for tampering. Look for stickers, tape, or other overlays that might hide a different code underneath.
• Consider the placement. A QR code etched into a solid surface—such as a wooden block in a restaurant— is harder to alter than one printed on a loose flyer or a street pole.
• Be wary of unexpected sources. If you receive a QR code in an unsolicited package, email, text message, or flyer, treat it with suspicion.
• Avoid codes that trigger device linking, multi‑factor enrollment, or sign‑ins unless you initiated the request.

What to do if you suspect a problem

If a scanned code leads you to a suspicious page, close the browser immediately and run a malware scan on your device. If you entered a password, change it from a trusted, uncompromised device and enable multi‑factor authentication. Should you have provided banking or credit‑card details, contact your financial institution right away.

Additional safety tips

When in doubt, type the company’s official website address directly into your browser instead of scanning the code. This ensures you reach the legitimate site and not a counterfeit copy.

By staying vigilant and following these simple precautions, you can continue to enjoy the convenience of QR codes without exposing yourself to unnecessary risk.

Original reporting: KCCI Des Moines — read the source article.