You’ve heard of phishing, but do you know about quishing?
The latest cybersecurity scam occurs when you receive an email that contains a QR code and instructions to scan it to address a problem, such as reentering your credit card number because the payment on a recent online purchase didn’t go through.
However, scanning the code actually takes you to the website of a fraudster looking to steal your information.
Like phishing emails, quishing messages often contain a sense of urgency. Other telltale warning signs may be misspellings and a reference to scanning the QR code to enable two-factor authentication.
The Postal Service wants employees and contractors to avoid quishing scams by proceeding with caution whenever they receive an email that contains a QR code.
Previewing the website behind the code before clicking and using a QR code scanner that contains built-in security features are two useful protocols to follow.
The CyberSafe at USPS Blue and LiteBlue pages have additional tips and guidance on avoiding cybersecurity scams.