For this “new” hacking vector, someone gets a phishing email asking them to scan a QR code, that code redirects to a malicious link (usually to steal credentials) and an account takeover occurs.

An estimated 11M households in the U.S. will scan a QR code this year and the majority of them, 71%, will not know if it is the start of a malicious hack.

These codes often lead unsuspecting users to fake websites that trick them into thinking there’s an urgent problem, like a package that wasn’t delivered or an issue with your account.