QR Codes Can Be Malicious — Don't Scan Random Ones

A QR code is just a link you cannot read before clicking. Someone can print a malicious QR code and stick it over a legitimate one at a restaurant, parking meter, or bus stop. Scanning it can redirect you to a phishing site, trigger a download, or authorize a payment you never intended.

Treat QR codes like links in suspicious emails — with healthy skepticism. If a QR code is on a sticker placed over another one, walk away. If you scan one, check the URL preview before opening it. When in doubt, type the website address manually instead.