The Postal Service is reminding employees and contractors to take precautions before scanning QR codes with USPS-issued mobile devices.
QR codes can provide quick access to information, but they can also be a tool for cybercriminals.
In cyberattacks known as “quishing,” scammers use fake QR codes to trick people into visiting fraudulent websites or downloading malicious software to steal sensitive information, money or personal identities.
These best practices will help protect Postal Service devices from quishing attacks:
• Scan QR codes from trusted sources only.
• Preview the website address before opening any links, if possible.
• Avoid sharing USPS credentials if a login screen or password prompt appears.
• Look for stickers or labels that might have been placed over legitimate codes.
• Report suspicious QR codes or websites.
The CyberSafe at USPS Blue and LiteBlue pages have additional tips and guidance on avoiding cybersecurity scams.
