QR codes can be used to pull up a menu in a restaurant, get more information at museums, pay for parking, etc. Those black and white QR codes are everywhere. And even though QR codes were invented in 1994, they’ve gained even more popularity during the pandemic. QR codes are a contactless option for places that don’t want to use things like paper menus or pay kiosks that everyone touches. Now, the FBI is sending out an urgent warning: Cybercriminals are tampering with legitimate QR codes to trick people into loading scam websites. They can do this by either switching out a real QR code with their fake one, or slapping a fake code on top of a real one. You go to scan it, thinking it's a legitimate QR code, but it's a fake. You're taken to a fake website where you're asked to enter in your personal and financial information. In some cases, the scammer asks for you to set up an account with your email and a password. Then the scammer will use that information to see if you also use it on other shopping and financial websites. Watch the video above: Check out how this scam works in a couple demonstrations you can't afford to miss. Our security expert, Jim Stickley plays the role of hacker while Jeff Rossen is the unsuspecting victim in two pretend situations.Anthony's Fish Grotto was kind enough to let our team come to its restaurant and show how this scam works. The restaurant doesn't use QR codes and has never had an issue with scammers. How can you protect yourself from fake QR codes? Once you scan a QR code, check with a server or employee that you're on the right site. If the website wants you to enter in any type of information, ask them why it's necessary and what you can do to bypass that request. Check the URL to make sure it is the intended site and looks authentic. A malicious domain name may be similar to the intended URL but with typos or a misplaced letter.If scanning a physical QR code, ensure the code has not been tampered with, such as with a sticker placed on top of the original code.Do not download an app from a QR code. Use your phone's app store for a safer download. If you receive an email stating a payment failed from a company you recently made a purchase with and the company states you can only complete the payment through a QR code, call the company to verify. Locate the company's phone number through a trusted site rather than a number provided in the email.Do not download a QR code scanner app. This increases your risk of downloading malware onto your device. Most phones have a built-in scanner through the camera app. Avoid making payments through a site navigated to from a QR code. Instead, manually enter a known and trusted URL to complete the payment.