Beware of “quishing” or QR code phishing says Better Business Bureau

SALT LAKE CITY — Two Utahns were victims of a new form of scamming called “quishing” or QR code phishing after trying to pay for parking.

How to avoid ‘quishing’

Director of Communications at Better Business Bureau Utah,  Melani Fox, said to be extra careful when you see a suspicious QR code posted in public.

“You just want to look closely to make sure it was not tampered with there’s not like a sticker over it or something scribbled out or scratched out you just if it’s you know, maybe encased in glass or it’s laminated,” said Fox. 

If you are unsure what the code is for, do not scan it. 

“Just to make sure you know who it’s from. If it’s someone you work with or a family member or anybody like a colleague, you just want to make sure it’s actually the true person and it’s not to someone random,” said Fox. 

Scammers send codes digitally or post in high-traffic areas that claim to be from a business, bank or government agency. They use QR codes linked to a legitimate-looking website asking for information like credit card numbers, date of birth, or social security numbers. 

“With a QR code you really can’t tell who it’s from or where it’s going to unless you scan it and so people are tempted to scan it very quickly,” said Fox. “And then if it’s a scammer, you can have malware download on your device. You can be directed to a phishing website or have viruses. It can be a big mess.”

Related: 

• Dodging political scammers during election year
• Scammer convicted of $6 million romance scam
• Scam call impersonating Utah health officials, targets the elderly