SESKStuff Everyone Should Know
SESK: Stuff Everyone Should Know · sesk.info/sec-qr-unexpected

An unexpected email contains a QR code asking you to sign in. What does the FTC say?

Do not scan it.

Start playing free

  1. Don't scan it ✔
  2. Scan it with your personal phone
  3. Scan it if the logo looks right

Why: A QR code hides the link, so you can't check it before you scan. Contact the company using a number or site you already trust.

Huh, didn't know that: The FTC also says to keep your phone updated and use multi-factor authentication.

The dad joke
Why did the computer cross the road? To get a byte to eat.
Like this card?
Play the game

References

Answer: Don't scan it. A QR code hides the link, so you can't check it before you scan. Contact the company using a number or site you already trust.

  1. FTC: Scammers hide harmful links in QR codes consumer.ftc.gov/consumer-alerts/2023/12/scammers-hide-harmful-links-qr-codes-steal-your-information
    Don't scan a QR code in an email or text message you weren't expecting.
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Security & PrivacyScammers sometimes cover real QR codes on things like what, per the FTC?Security & PrivacyWhat is QR code phishing called, and where might the QR code hide?Security & PrivacyThere's a QR code sticker on the parking meter. What's the smart move before you pay?

That's stuff everyone should know.