Have you ever scanned a QR Code and ended up at an unfamiliar or strange web site? Have you ever received a QR code from an unfamiliar email address or via text message urging you to scan right away? If you do, then don’t scan the QR code! This type is a scam called quishing.
Quishing, short for QR code phishing, is an identity fraud scam utilizing QR codes. Scammers post physical images of QR codes in a high traffic location or send them via email or text message. Once you scan the QR code, it takes you to a scammer’s website, which may look like legitimate, where the scammer lures you into providing personal or financial information. These scammers often attempt to disguise themselves as a government agency, bank, or other company to lend legitimacy to their claims.
The criminals are looking for personally identifiable information (PII) about the victim such as: account usernames and passwords, Social Security number, date of birth, credit and debit card numbers, personal identification numbers (PINs), or other sensitive information. This information is used to carry out other crimes, such as financial fraud.
To report USPS related quishing, send an email to spam@uspis.gov