Job Offer QR Code Scam: What It Is and What to Do

How fake job offer QR codes work

Scammers impersonate recruiters, staffing agencies, and recognizable companies. The delivery method varies — but the mechanism is the same. A QR code in the message routes you to a page designed to harvest your personal information.

The three most common approaches:

• Job posting flyers. Printed flyers in public places — bulletin boards, telephone poles, laundromats — include a QR code to "apply online." The code leads to a form that asks for your name, Social Security number, and bank account for "direct deposit setup." There's no job.
• Email or LinkedIn messages. "Congratulations, you've been selected" — with a QR code to "confirm your interview slot" or "download the job description." The link goes to a credential-stealing page, not a calendar or PDF.
• Text or WhatsApp messages. Urgent-sounding messages about a remote job, with a QR code to "complete onboarding paperwork." These often impersonate Amazon, FedEx, or large retailers with known remote hiring programs.

Using a QR code instead of a plain link is deliberate. Emails carrying QR codes don't trigger URL scanners the way hyperlinks do — so the message lands in your inbox looking clean. This technique is part of a broader pattern called quishing, which attackers use specifically to bypass email security filters.

The equipment advance scam: a variant worth knowing

One variant goes further. You're told you've been hired. Before your first day, you need to purchase equipment — a laptop, headset, or specialized software. The company will reimburse you as soon as you start.

The reimbursement never comes. The QR code in the "purchase instructions" routes to a Venmo, Zelle, or crypto payment page belonging to the attacker. You pay. The "job" disappears.

No legitimate employer asks you to buy your own equipment upfront and pay via QR code. This holds regardless of how professional the offer letter looks, how many rounds of "interviews" you completed, or how urgently they say you need to start.

What to do right now

Your response depends on what you did after scanning.

If you only scanned and didn't enter anything: Your risk is low. Close the page and don't return to it. Monitor your email and accounts for suspicious activity over the next 48 hours.

If you entered personal information — name, SSN, address, or bank account:

1. Freeze your credit immediately. Contact Equifax, Experian, and TransUnion and place a freeze on your file. It's free, reversible, and blocks new accounts from being opened in your name.
2. Call your bank. If you submitted account or routing numbers, alert your bank to potential fraudulent ACH activity and ask them to watch for unauthorized withdrawals.
3. Change your passwords. Prioritize your email account, any job-seeker platforms, and any account using the same password you may have entered.
4. Report to the FTC and FBI. File a complaint at reportfraud.ftc.gov and the FBI's Internet Crime Complaint Center at ic3.gov. Document everything — screenshots, message timestamps, the URL your phone showed you.

If you made a payment via QR code:

1. Contact the payment service immediately. Report the transaction as fraud to Venmo, Zelle, Cash App, or your bank — whichever you used. Act within hours.
2. File a police report. Most dispute processes require one. Your local police non-emergency line can take the report.
3. File with the FTC. Go to reportfraud.ftc.gov and document the full scam — payment amount, how you were contacted, and the QR code destination.

For a complete recovery checklist after any suspicious scan, see what to do if you scanned a suspicious QR code.

How to protect yourself before you scan

Job offer scams succeed because they exploit hope and urgency — two conditions that make people skip the verification step. A few seconds of checking is all it takes.

• Scan with QRsafer first. It checks the destination URL against multiple threat intelligence sources and returns a Safe, Risky, or Dangerous verdict before your browser opens anything. A phishing form built to look like an onboarding portal will not clear a threat check.
• Verify the company independently. Look up the employer on LinkedIn and their official website. Search for the exact job title on their careers page. If the role doesn't appear anywhere official, the offer isn't real.
• Never apply through a flyer QR. Legitimate employers post jobs on verifiable platforms with accountability — LinkedIn, Indeed, their own site. A QR code on a telephone pole has none of that. Go directly to the employer's website instead.
• Treat any upfront equipment request as a disqualifying signal. No matter how convincing the rest of the offer seems, a request to purchase equipment via QR code payment is a scam. End the conversation.

For a broader guide to identifying suspicious codes before you open them, how to spot a malicious QR code before you scan covers the visual and contextual signals that matter most.

Frequently asked questions