Brush Up on Scam Awareness

QR codes are everywhere, from restaurant menus to parking meters. They provide a fast and simple way to access information or services, but scammers can exploit this convenience by inserting harmful links into QR codes to steal personal information.

By being aware of these risks and following a few simple precautions, you can protect yourself from falling victim to QR code scams.

How They Do It

• Public QR Codes: Scammers can cover legitimate QR codes in public places like parking meters, stores, and restaurants. The safest practice is to always inspect the QR code closely before scanning it to ensure it hasn't been tampered with. If something looks off, it's better to skip the QR code entirely and visit the official website directly.

• Mail Tampering: QR codes on packages can be altered by scammers through mail or package tampering. Check if the QR code is a printed part of the packaging or a sticker that might have been added later. When in doubt, visit the company's official website to verify the QR code's authenticity.

• App Store Scams: QR codes leading to app downloads can install malware on your device. If you are directed to download an app, take a moment to pause and research the app. Look into the app's reviews, how long it has been available, and what permissions it requests before installing.

Recently, a member visited one of our branches while on the phone with a scammer who was trying to help them open a PayPal account to transfer supposed winnings. Thankfully, our staff recognized the signs of a scam and politely asked the member to end the call, which allowed us to inform them about the potential threat.

What Went Wrong?

Scammers often pose as legitimate entities, such as PayPal, to trick individuals into providing sensitive information or transferring money. In this case, the scammer pretended to help the member claim a prize by opening a PayPal account.

These scams often use a sense of urgency or excitement to pressure the victim into acting quickly without verifying the legitimacy of the call. Scammers often deploy common tactics such as:

• Unsolicited Contact: The scam begins with an unexpected call, email, or text claiming you’ve won a prize or that there’s an urgent issue with your account.
• False Authority: The scammer may claim to be from a reputable company like PayPal, creating a false sense of trust.
• Request for Information: They often ask for personal information, such as Social Security numbers, bank details, or login credentials, to "verify" your identity or "process" your prize.
• Redirection to Fake Websites: Scammers might direct you to a website that looks like PayPal’s, but it's a fake site designed to steal your information.

Another common scam involves receiving a text message or email stating that a package is on hold due to a bad address. The message prompts you to click a link to update your information for a small fee. These links sometimes end in unusual domains like .top or .zl, which are indicators that a website may be untrustworthy.

Stay Protected

Post Office scams are a type of phishing attack where you receive a fraudulent message claiming that your package is on hold due to an incorrect address. The goal of the scammer is to trick you into clicking a link and providing your personal information or making a payment.

• Look Out for Unexpected Messages: Be cautious if you receive a text or email about a package you weren’t expecting. Scammers rely on catching you off guard.
• Pressure to Act Quickly: Scammers create a sense of urgency, insisting that you must update your information immediately to avoid losing the package.
• Verify Links: The message may include a link to a website with an unusual domain extension like .top or .zl. Legitimate companies rarely use these domain endings. If you receive a message about a package on hold, avoid clicking any links. Instead, go directly to the delivery service’s official website or contact them through verified channels.
• Verify the Source: If the message claims to be from a delivery service, check the sender's email address or phone number. Scammers often use addresses or numbers that look similar but aren’t quite right.
• Keep Your Information Safe: Never provide personal or financial information through unsolicited messages. Always verify the legitimacy of the request first.

By following the steps below, you can lower the risk of identity theft and safeguard your personal information.

When to Share

Your Social Security Number (SSN) should only be shared when absolutely necessary, such as when setting up accounts with trusted institutions. Even in legitimate situations, always verify that the request is coming from an official source before providing your SSN.

• Verify the Source: Ensure you’re dealing with a verified entity by double-checking contact information and avoiding unsolicited requests.
• Monitor for Misuse: Regularly review your credit report for unusual activity. If you suspect your SSN has been compromised, report it to IdentityTheft.gov and consider placing a credit freeze or fraud alert on your account.
• Keep It Secure: Avoid carrying your Social Security card, and never share your SSN through unsolicited calls, texts, or emails. If in doubt, contact the company directly using official channels to verify the request.