For the past several months, I’ve been documenting new and emerging real estate scams (see my blog posts here, here and here), with the hope that if we’re all vigilant and aware, we can mitigate these fraudulent situations.
Well, I’m back and this time it’s with a warning about QR codes, which, according to a recent article published by the California Association of REALTORS® (CAR) are now being used by cybercriminals in phishing emails.
Here’s how the scam works: A QR code in an email is used to trick the visitor into clicking on a fraudulent website and sharing personal information.
This particular scam is easy to spot. If you receive an email with a QR code and you open it on your laptop, don’t use your phone to scan the code and see where it might go. As the CAR article stated: “A QR code can direct you to a malicious site designed to steal your login credentials or other personal information.”
Now you might ask: What if the email comes from a person or address I recognize?
Still don’t scan. Often, fraudsters can hack into a known account and use it to distribute phishing emails to their contacts. The good news is, your phone has a setting where you can check the QR code’s URL before you click. If you see a URL that looks like it’s been shortened or one that looks suspicious, avoid clicking. However, my rule of thumb with QR codes in email is to simply avoid them altogether and respond back asking for a direct URL.
The most red of red flags on a URL you visit from a QR code is when it asks for personal information like your name, email address or even financial information. Stop what you’re doing, drop the phone and roll on over to your phone’s contact list to give that person a call.
ANDREW: “Hi, did you send me an email with a QR code that leads to a form I should fill out?”
REAL ESTATE COLLEAGUE: “Hi, thanks for calling to confirm and no, I didn’t.”
“Your email may be compromised, I’d change your password and let your contacts know.”
“Thank you!”
See? It’s as easy as that!
When it comes to scams, you have to use your intuition. If something feels off, trust your gut. Also, check in with your email correspondent to make sure the communication is legitimate. Real estate is a business that thrives on collaboration. When one person succeeds, we all succeed. Together, we can help combat these scams and avoid some potentially dangerous (and costly) situations.
–
Andrew Manning • REALTOR® • Berkshire Hathaway HomeServices California Properties • DRE: 00941825 • 818-380-2147 • andrew@andrewmanning.com