QR (quick response) codes can be useful and have become more popular, especially since the pandemic. You can find them on direct mail ads, at retail outlets, on company websites, and in many other places to get more information about products or to score a coupon code or discount.

While many of the codes are trustworthy, some can be dangerous; cybercriminals can exploit and lurk behind a fraudulent QR code. Here are some things to keep in mind before you scan one:

• Just like you shouldn’t click on suspicious hyperlinks or download unknown attachments, especially from a stranger, QR codes can take you to illegitimate websites that could cause trouble. Worst case, a crook can download malware to your device or direct you to a site where they will try to obtain your personal and financial data or log in credentials. Once in, they can have a field day by accessing and compromising your online accounts, peer to peer payment apps, social media pages, contact info and photos.
• Don’t trust a QR code supposedly sent by a friend in an email, text, online post or mailer. Their account could have been hacked. Instead, use your browser to visit the site using a domain name that you know is legit.
• Criminals are known to distribute flyers with malicious QR codes or put fraudulent stickers over a legitimate one in public places like train stations and bus stops. Malware could be installed on your device and cause a whole host of problems.
• Beware of using a QR code to pay a bill. There are many other secure payment methods that are less susceptible to fraud.
• Consider downloading protection apps onto your mobile device that check for malicious or inappropriate QR codes.

Ultimately, QR codes can be easily created, but like other tech tools, can be highjacked by fraudsters. Beware before you scan.