USPS logo LINK — USPS employee news Printable

Are you sure that QR code is legit?

USPS is warning employees and contractors about a new scam: quishing

Hands use a smartphone to scan a QR code
Before you scan that QR code, do you know where it will take you?

You’ve heard of phishing, but do you know about quishing?

The latest cybersecurity scam occurs when you receive an email that contains a QR code and instructions to scan it to address a problem, such as reentering your credit card number because the payment on a recent online purchase didn’t go through.

However, scanning the code actually takes you to the website of a fraudster looking to steal your information.

Like phishing emails, quishing messages often contain a sense of urgency. Other telltale warning signs may be misspellings and a reference to scanning the QR code to enable two-factor authentication.

The Postal Service wants employees and contractors to avoid quishing scams by proceeding with caution whenever they receive an email that contains a QR code.

Previewing the website behind the code before clicking and using a QR code scanner that contains built-in security features are two useful protocols to follow.

The CyberSafe at USPS Blue and LiteBlue pages have additional tips and guidance on avoiding cybersecurity scams.