What is Quishing? Here’s What Michigan Residents Need to Know About QR Code Scams

You may be surprised to learn that QR codes have been around for three decades but it shouldn't surprise you to learn that scammers are finding ways to misuse them.

There's already a name for it:  Quishing.

Phishing, Vishing, Smishing, and Quishing

It's practically a full-time job keeping yourself and your family safe from scams. But you can stay one step ahead of the bad guys if you know to be on the lookout for scams designed to steal your personal information and ultimately your money.

We're all aware of phishing scams, where bad actors use email messages to 'phish' for data by sending links.

Vishing and Smishing are terms that refer to scams perpetrated by voice calls (Vishing) and text messages or SMS (Smishing).

As the use of Quick Response or QR codes has exploded in recent years, bad actors are taking advantage of their popularity by unleashing QR code scams or 'Quishing Scams.'

How Are Scammers Using QR Codes to Steal Personal Information?

The Federal Trade Commission, US Post Office, Michigan Attorney General Dana Nessel, and our affiliate station have all issued warnings about squishing and how crooks are using the codes nefariously.

• Scammers have been discovered covering legitimate codes with their own - sometimes in places like parking garages or on meters - in order to get you to scan your way to websites designed to steal your personal information.
• Other ruses include sending QR codes via email or text message. The sender will claim there's a problem with your account, that a package can't be delivered, or falsely claim that you need to change your password because your account has been breached.

How Can You Guard Against Quishing Attacks?

• The FTC recommends that if you see a QR code in an unexpected place, remember to inspect the URL carefully to make sure it's not been spoofed.
• Don't scan a QR code that comes in a text or email message that you're not expecting.
• Update your phone's operating system and protect your accounts with strong passwords.