The Postal Inspection Service is warning USPS employees and the public about a form of phishing — called quishing — that uses fake QR codes to commit identify fraud.
The scam typically starts with an unsolicited text message, email, social media post or a poster that contains a QR code.
The message may claim to offer a discount, a gift or an enticing offer — but when the code is scanned, the user is redirected to a fake site designed to look legitimate.
The user is asked to enter personal information such as their name, address, banking details and passwords, which the scammer then uses to commit identity fraud.
How can you protect yourself from quishing? Here are some tips from the Inspection Service:
• Don’t scan the code: Instead, verify the source by contacting the company or organization directly using their official website.
• Block spam messages: Call your carrier — usually by dialing 611 — and request a block on text and multimedia messages sent as email.
• Update your software: Keeping your smartphone’s software up to date could help protect your data.
• Trust your instincts: If something is too good to be true, it probably is. Don’t let the promise of something free cloud your judgment.
The Inspection Service is promoting identity fraud awareness throughout June. The agency’s website has more information.