QR Codes
Whew!
You got to this article by scanning a QR Code from the Office of the Comptroller. We are an agency of the Commonwealth of Massachusetts that takes cybersecurity very seriously, including the promotion of good cyber hygiene across all of the state’s departments, employees, and residents.
Congratulations on making it to a safe and secure website!
But not all QR codes are safe.
QR codes in the wild can help make ordering from restaurants, getting information, or paying someone using your phone a lot more convenient. But not every QR code is as it seems.
When scanning a QR code, look closely. Fraudsters have been using fake QR codes to try to steal your information and/or infect your device with malware. Whenever you see a QR code, use Pause Verify Report to keep yourself and your devices safe.
Pause before you scan the code:
- Make sure it’s not a sticker placed on top of the original printed material. This could be a sign that a fraudster has tampered with it to re-direct unsuspecting users.
- Your camera application might offer a preview of the URL the QR code is taking you to. Make sure that this is where you’re intending to go before you follow the link.
- Fraudsters will often send fake QR codes through the physical mail, with offers that are too good to be true.
Verify first that the sender is real, either by visiting their primary website or by calling the number on the official website to check that the communication is legitimate.
Finally, Report any QR codes that you can’t verify. If you’re at work, let your IT department know. If you’re on personal time, let the company who may be spoofed know.
The Office of the Comptroller offers a library of resources and training on tips like this one to keep everyone safe. Please visit https://macomptroller.org/ctr-cyber