Scammers are constantly devising new ways to separate you from your money. The latest trick is called “quishing.”
Quishing, similar to smishing and phishing, uses deceit to direct you to fake websites designed to steal your personal information, such as your Social Security number, username and passwords, date of birth, or credit/debit card numbers.
How Quishing Works
According to the U.S. Postal Inspection Service, quishing is short for QR code phishing. Scammers post signs with QR codes in high-traffic areas or send them via email or text. When you scan the QR code, it directs you to a scammer’s website disguised to look legitimate, often mimicking a government agency, bank, or other trusted entity. Once there, you’re prompted to enter personal information, which the scammers use to commit crimes like financial fraud.
How to Avoid Becoming a Victim of Quishing
- Be Cautious with QR Codes: Before scanning a QR code, consider its source. Be especially wary of unsolicited emails or physical locations like signs, posters, or flyers. If you receive an unexpected email or text with a QR code, do not scan it, particularly if it urges immediate action.
- Verify the Source: Contact the bank, government agency, or company being impersonated to report the suspicious QR code and confirm its legitimacy.
- Protect Personal Information: Treat your personal information like cash. Your Social Security number, credit card numbers, and other personal details can be used to steal your money, open new accounts, or file fraudulent tax returns.
- Block Spam Messages: Call your carrier’s customer service and instruct them to block all text messages sent to you as email and block all multimedia messages sent to you as email.
By staying vigilant and taking these precautions, you can protect yourself from becoming a victim of quishing and other scams.