A simple black-and-white square now carries more risk than most shoppers realize. QR codes appear everywhere, from product packaging to delivery boxes and even so-called safety notices that claim urgent recalls. And sneaky scammers have started exploiting that trust by placing fake product-recall QR codes in emails, flyers, and counterfeit notices that lead directly to malware. Amazon has flagged this growing tactic in its scam awareness guidance, warning that bad actors often mimic legitimate recall messaging to pressure quick action.
The moment curiosity takes over, a quick scan can open the door to stolen data, device infection, financial fraud, and more. Shoppers who rush through these messages without verifying the source face the highest risk of compromise. In this digital age, there is no excuse to be unaware.