QR Code Scams & Smishing: What You Need to Know to Stay Safe

Scammers are constantly adapting their tactics, and two of the fastest‑growing threats today are QR code scams and smishing (text message phishing). These scams are designed to look legitimate, create urgency, and trick you into sharing personal or financial information.

At Directions Credit Union, we want to help you recognize the red flags so you can protect your money and your identity.

What Are QR Code Scams?

QR codes are everywhere—from parking meters and restaurant menus to emails and mailed notices. Scammers take advantage of this convenience by creating fake QR codes that send you to fraudulent websites.

These sites may ask you to:

Enter online banking login credentials
Provide debit or credit card information
Make a payment or download malicious software

Once submitted, your information can be used to steal funds or commit identity theft.

Common examples include: fake parking payment QR codes, counterfeit delivery notices, or QR codes pretending to be from financial institutions.

What Is Smishing?

Smishing is phishing that happens via text messages. These messages often appear to come from a trusted source—like a credit union, retailer, or government agency—and pressure you to act quickly.

Smishing texts may warn of:

Suspicious account activity
Locked or compromised accounts
Missed deliveries or unexpected refunds

They usually include a link or QR code leading to a fake website designed to steal your information.

Why These Scams Work

QR code scams and smishing are effective because they rely on:

Urgency (“Act now or your account will be locked”)
Convenience (no typing—just scan or click)
Familiar branding from trusted organizations

When people feel rushed, they’re more likely to overlook warning signs.

How to Protect Yourself

A few smart habits can help keep you safe:

Pause before you scan or click. Ask yourself if you were expecting the message.
Be suspicious of urgency. Directions Credit Union will never pressure you to act via text.
Don’t enter sensitive information after scanning a QR code.
Go directly to the source. Use the official website or app instead of a link provided in a text.
When in doubt, contact us directly.

What to Do If You’ve Been Targeted

If you think you interacted with a scam:

Stop responding immediately
Contact Directions Credit Union right away
Change your passwords and monitor your accounts

You can also report scams at: