The DC Department of Insurance, Securities and Banking (DISB) is reminding residents to be cautious when scanning QR codes.
QR codes (quick response codes) are those square, scannable patterns you see everywhere—on menus, parking meters, pay stations, emails and even on TV. They make life easier by linking to websites, accounts or even coupons. But scammers are taking advantage of QR codes to steal your personal information.
How QR Code Scams Work
Scammers may send you a QR code via text or email, pretending to have an urgent reason for you to scan it. They might say:
- "We couldn’t deliver your package, click here to reschedule."
- "There’s a problem with your account, confirm your details now."
- "Suspicious activity on your account! Change your password immediately."
They may also place fraudulent QR codes on stickers or flyers or elsewhere. If you fall for it and scan the QR code, it could send you to a fake website that looks real. Once you log in, the scammers get your personal info. Or, the code could install malware on your device without you even knowing.
How to Avoid QR Code Scams
- Check the link: If a QR code looks suspicious or is in an unusual place, inspect the URL before opening it. Watch for misspellings or letters that look swapped.
- Don’t act quickly: Be cautious with QR codes from texts or emails, especially if they push you to act fast. If you think the message might be real, contact the company using a verified phone number or website.
- Stay secure: Keep your phone updated with the latest software, and always use strong, unique passwords for your accounts.
Report Fraud
If you’ve been a victim of a QR code scam or other financial fraud, contact the DISB Enforcement and Consumer Protection Division at 202.727.8000. You can also report it to the Federal Trade Commission (FTC) at reportfraud.ftc.gov or by calling 877.382.4357.