A QR code is just a link you can't read. Treat one in an email, letter or poster like any other link.
Scammers have started putting their links inside QR codes. A code in an email gets past filters that check links, and scanning it on your phone takes you away from your work computer's protections. You'll also see fake codes stuck over real ones on parking meters and posters, and on unexpected letters and packages.
Signs to look for
- A QR code in an email asking you to sign in, approve MFA, view a document or pay something
- A sticker placed over another code, or a code on a package you didn't order
- A page that opens and asks for your work password, card details or an app download
What to do
- Don't scan QR codes in emails that ask you to sign in or update anything. Go to the website yourself instead.
- Check the address your phone shows before you open it. If it doesn't match the company, don't open it.
- Never enter your work password on a page you reached from a QR code you weren't expecting.
Scanned one and entered your password? Call us on 707-755-8000 straight away so we can secure your account.
