Technology
QR code email scam targets employee reviews
NEWYou can now listen to Fox News articles!
We received an email that looks like an official HR notice about a performance review. It mentions pay updates, benefits and a deadline. There is also a QR code to access your file.
The message claims to come from an internal HR office. Instead, it pushes us to scan a QR code to access your appraisal. That setup is a classic phishing move. In many cases, these scams try to move you off your computer and onto your phone, where it is harder to verify links.
So, let’s break down what stands out and why this message should absolutely not be trusted.
Sign up for my FREE CyberGuy Report
- Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
- Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
FAKE TRAFFIC VIOLATION TEXT SCAM USES QR CODES TO STEAL PAYMENT INFO
A fake HR performance review email uses a QR code to push employees toward a phishing page designed to steal login details. (Kurt “Cyberguy” Knutsson)
QR code email scam red flags you should notice
This email is built to feel routine and urgent at the same time. Take a closer look, and the red flags start to add up.
Red flag #1: The sender’s email does not match the company’s
The message shows “CyberGuy” as the sender. The actual email address is mario@toituresphenix.com. That domain has nothing to do with the brand it claims to represent. This is one of the biggest warning signs. Legitimate companies send HR notices from their own domain. If the domain looks unrelated, treat it as suspicious right away.
Red flag #2: The email creates urgency with a deadline
The email says you must act by May 15, 2026. Deadlines push people to react fast. Scammers rely on that pressure, so you skip basic checks. Real HR systems do use deadlines. The difference is how they deliver them. They do not rely on a random email with a QR code.
Red flag #3: The QR code is the main call to action
The message tells you to scan a QR code to access your file. That is a newer phishing tactic called “quishing.”
Why it matters:
Most companies will send a direct link or ask you to log in through a known portal. They do not force QR-only access for something as sensitive as compensation details.
Red flag #4: The greeting is generic instead of personal
The email starts with “Dear Techtips.” It looks like a mailing list or placeholder. Legitimate HR messages usually address you by your full name. They often include employee-specific details that scammers cannot easily fake.
Red flag #5: The email uses vague HR system language
The email mentions a “secure HR access system” but never names it. There is no recognizable platform like Workday or ADP. That vagueness is intentional. It avoids giving you something you can verify.
Red flag #6: The branding looks real yet feels off
There is a Microsoft logo in the message. That does not mean Microsoft sent it. Logos are easy to copy. The layout tries to mimic a corporate notice. Still, the formatting feels generic. Real internal emails usually follow a consistent company template you have seen before.
Red flag #7: The high-importance flag adds pressure
The message is marked as high importance. That visual cue pushes urgency again. Scammers stack these signals so you feel like you cannot ignore the message.
Red flag #8: The instructions bypass normal login habits
Instead of telling you to log into your HR portal, the email asks you to scan and access a file directly. That isn’t how sensitive employee data is handled. Companies want you inside a secure login system, not opening a file from a QR code.
FBI WARNS OF QR CODE SCAM DISGUISED IN MYSTERY PACKAGES
QR code phishing scams can hide suspicious links, making it harder for users to verify the destination before opening it. (Hispanolistic/Getty Images)
Why QR code phishing scams are growing fast
QR codes feel safe because we see them everywhere. Restaurants use them. Airlines use them. That familiarity lowers your guard. Scammers take advantage of that trust.
They embed malicious links inside codes so you cannot preview them easily. Once you scan, you may land on a fake login page that looks real. From there, it is a quick path to stolen credentials.
What happens if you scan a malicious QR code
If the QR code leads to a phishing page, a few things can happen:
- You enter your login details and hand them over
- Malware downloads silently to your device
- The page asks for more personal information
In some cases, attackers use the stolen login to access company systems or your email account. That can lead to more attacks against your contacts.
Ways to stay safe from QR code email scams
These scams rely on speed and distraction. Slow things down, and a few simple checks can protect your data.
1) Do not scan unexpected QR codes
If an email pushes you to scan a code, pause. Go to the official website yourself instead of using the code.
2) Check the sender’s domain carefully
Look past the display name. Verify the full email address. If it does not match the company, do not trust it.
3) Use your normal login path
Access HR systems by typing the URL you already know or using a saved bookmark. Avoid links and codes in emails.
4) Watch for generic greetings
Messages that avoid your real name should raise suspicion. That is often a sign of mass phishing.
BE AWARE OF EXTORTION SCAM EMAILS CLAIMING YOUR DATA IS STOLEN
Employees should access HR systems through official portals instead of scanning QR codes or clicking links in unexpected emails. (gpointstudio via Getty Images)
5) Confirm with your company
If something feels off, ask your HR team directly. Use a known contact method, not the one in the email.
6) Use strong antivirus software
Strong antivirus software can block malicious links, flag phishing pages and stop malware before it installs. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com
7) Consider a data removal service
Scammers often use personal data found online to make emails feel more convincing. A data removal service can reduce your exposure by removing your information from broker sites. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com
8) Keep your devices and apps updated
Security updates patch known vulnerabilities. Turn on automatic updates so you are always protected.
9) Enable two-factor authentication
Even if your login gets stolen, a second verification step like two-factor authentication (2FA) can stop attackers from getting into your account.
Join CyberGuy Live: Lock Down Your Phone in 30 Minutes (Saturday, June 13, 10 am ET)
Your phone holds your email, passwords, photos, banking apps and personal data. In this free, live online class, Kurt the CyberGuy will walk you step by step through simple phone security fixes you can do in real time. You’ll learn how to improve your privacy settings, spot the latest phone scams, use trusted security tools and walk away with a simple checklist to stay protected. Register here: CyberGuyLive.com
Kurt’s key takeaways
Phishing emails keep evolving. Today, it is a QR code tied to a fake HR notice. Tomorrow, it could be something else that feels just as routine. The safest thing to do is simple. Do not trust the path an email gives you when sensitive information is involved. Use your own path instead.
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
If a message asks you to act fast with a QR code, would you stop and verify it first or trust it because it looks familiar? Let us know by writing to us at Cyberguy.com
Sign up for my FREE CyberGuy Report
- Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
- Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
Copyright 2026 CyberGuy.com. All rights reserved.
Technology
Cold Court’s debut EP is an infectious, glitchy genre mashup
Cold Court is a brother-sister duo from Philly that seems to love nothing more than shoving all of their influences together in a messy soup that at least superficially resembles the hyperpop you’ve come to expect from acts like 100 Gecs. But, where songs like “Dumbest Girl Alive” goofily wink at pop punk and emo, Cold Court are a bit more self-serious, and that’s not necessarily a bad thing.
The opening track on the band’s debut EP (^_^) / (aka Hands Up), “Nina”, starts off sounding not unlike the dance punk bands that stormed the scene in the mid aughts like Franz Ferdinand or Test Icicles. But that all starts to change about a minute in, when the skuzzy riff gets chopped up and fed through a beat repeater. Another minute later, there’s a mellow proggy bridge that calls to mind Mars Volta. Then the whole thing ends on a barrage of glitches and digital chaos.
The record largely continues in this fashion. The songs on Hands Up clearly started life on drums and guitar. But then Mini and Jojo fed their creations to a computer, added layers, rearranged the pieces, and piled on the effects. Single “Burn” is perhaps the best example of all the parts coming together. It features big rock riffs, Daft Punk-esque synths, dubstep chops, autotuned vocals, and even a rapped bridge. Yet the whole thing feels like a cohesive, seething whole as they shout, “I just want to see it burn, give a fuck about your word.”
They’re not the deepest lyrics, but it works.
While Cold Court is clearly an exercise in maximalism, not every song goes quite as big as “Burn.” “Cola” moves more slowly, strips back some of the layers, but doesn’t turn the volume down. “Glass” almost becomes math rock as its guitars get chopped up and spit back out, and the EP’s closer “Light” is blown-out, sparkly prog.
Over the course of a full album, the relentless barrage might grow exhausting. But at just 21 minutes, Hands Up doesn’t overstay its welcome, and it will be interesting to see how the band evolves as the young duo grow.
Technology
Bose thinks it can be a media company for some reason
The history books are littered with the corpses of corporate record labels started by companies that had no business being in the music industry. Bose thinks it can be the exception to the rule. It thinks it can be Red Bull. And, while Bose has more of a right to dip its toes into the media world than Build-a-Bear, there’s little reason to believe it can succeed where so many others have failed.
In an interview with Business Insider, Bose CMO Jim Mollica said the company had created Bose Studios as part of a move away from traditional “campaign-driven marketing.” A big element of that is going to be Bose Records, a new label the company has formed to “help break underappreciated or new artists.” The competition isn’t the big three — Sony, UMG, Warner — it’s independent labels already being squeezed in an era of bedroom producers and self-distribution.
Mollica was transparent about the real goal, though: build a library of music that Bose could feature in its commercials without having to pay the licensing rights for. He said that the company wouldn’t own the artists’ masters or take a share of their streaming or sales revenue, and that they’d be free to sign with other labels. That sounds extremely artist-friendly on its face, which is great. But there’s still a lot we don’t know about the new business venture.
Bose is primarily known for making consumer-grade audio gear that tries to put on airs. Most audiophiles will be quick to tell you that Bose products are overpriced and, at best, merely okay. What the company is undeniably great at is marketing. But selling mediocre Bluetooth speakers at inflated prices is very different from discovering talent and promoting artists. Mollica didn’t mention poaching A&R talent from other labels or any splashy celebrity partnerships to launch. Though he did mention that some “legendary Hollywood names” were attached to films and TV series being commissioned by Bose Studios.
Which brings us to another issue: a lack of focus. Simply launching a record label is hard enough. Why does Bose — again, whose primary experience is in manufacturing audio hardware — think that it can also launch a movie studio, a podcast network, and a live event production company? These are all things that Mollica said are in the works, according to Business Insider.
Sure, you could argue that Bose, as an audio company, has more of a right to dive into the music industry than those failed ventures. But they featured celebrity endorsements, partnerships with bigger labels, or, at the very least, some specific cultural hook. Bose Studios just seems desperate and unfocused.
Technology
Fake AAA email scam targets drivers
NEWYou can now listen to Fox News articles!
A strange email lands in your inbox, and at first, it sounds helpful. It uses a familiar company, leans into family safety and warns that you may need to act before a deadline.
That is what makes this suspicious AAA-themed email we received worth warning you about. It reads like a friendly safety reminder from someone who claims to work in AAA’s member outreach. It isn’t the kind of message most of us would delete right away.
Still, something feels off. Before you click any link or trust the warning, it helps to slow down and look for the signs that this could actually be one big scam.
Sign up for my FREE CyberGuy Report
- Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
- Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
FAKE TRAFFIC VIOLATION TEXT SCAM USES QR CODES TO STEAL PAYMENT INFO
A suspicious AAA-themed email can look harmless at first, especially when it uses a familiar company and a safety warning. (Kurt “CyberGuy” Knutsson)
What this fake AAA email scam is
The email appears to use car safety as bait, then pushes you toward a link that should raise concern.
A message built around family safety
The email claims to come from someone named Sloane Garibaldi at AAA. It says the recipient’s household appeared on a member outreach list. Then it asks whether the family is “actually safe” in the car. That wording makes the message feel personal. It also turns a random email into something that sounds urgent.
A supposed rule with a deadline
The email says a new federal rule starts on July 1, 2026. It claims every passenger vehicle must carry a certified emergency rescue tool that can cut a seatbelt and break glass. Then it adds a warning about a $200 fine per occurrence. That kind of deadline can make any driver worry. However, the message does not point to a government site or an official AAA page. Instead, it pushes a shared Google link.
A fake status check
The email includes a small “compliance check” box. It lists the recipient as a member and says the check has not been completed. That detail makes the message feel like an account notice. It also creates a small task the reader may want to fix. Scammers use that tactic often. They make the action look quick, then hope you click before you question the message.
YOUR EMAIL DIDN’T EXPIRE; IT’S JUST ANOTHER SNEAKY SCAM
The email claims a new car safety rule is coming, but the message pushes the recipient toward a shared link instead of an official AAA website. (Kurt “CyberGuy” Knutsson)
Red flags in the fake AAA email
Several clues inside the message suggest this email deserves to be treated as suspicious.
1) The real sender address looks suspicious
The display name says Sloane Garibaldi, but the expanded sender address shows pfiz@middlerunred.guru. That domain has no clear connection to AAA. Display names can be faked. The real sender address often tells a very different story.
The sender name looks familiar, but the real email address shown here has no clear connection to AAA. (Kurt “CyberGuy” Knutsson)
2) The email does not use official AAA branding
The message uses the AAA name, but it does not include the official AAA logo or the kind of polished branding you would expect from a real member safety notice. That alone does not prove an email is fake. However, it adds to the concern when combined with a strange sender address, a shared link and urgent language. A real company email usually looks consistent with the brand’s website, app and past messages.
3) The link goes through a shared URL
The message uses a share. Google link instead of an official AAA website. That should make you pause. Shared links can hide the final destination. They can also lead to fake forms that collect personal details, account information, vehicle data or payment details. A real AAA notice should point to an official AAA domain or tell you to log in through the AAA app.
4) The email pushes fear before facts
The message asks whether your family is safe. It mentions a deadline. It warns about fines. Then it says the check only takes 60 seconds. That is a pressure move. The scammer wants clicking to feel easier than checking.
5) The rule citation does not match the claim
The email cites NHTSA FMVSS 571.220. That sounds convincing until you check what the rule covers. That federal standard deals with school bus rollover protection. It does not appear to require everyday passenger vehicles to carry an emergency rescue tool. Scammers often use official-sounding language because many people will not look it up.
6) The tone feels too casual for a legal warning
The message uses friendly lines like “I promise I’m not being dramatic” and “I’d rather chase you about this twice.” That tone may be meant to lower your guard. It sounds like someone trying to help. Still, a real safety or compliance notice should not arrive from a strange domain with a shared link and casual pressure.
7) The fine print repeats the suspicious link
The bottom of the email includes a P.S. that says the link may “wrap oddly” in your mail app. Then it repeats the same shared link so you can click it again. It even adds, “I’ve had people miss it because their inbox cut it in half,” which sounds casual but also gives the sender another excuse to push the link. That may seem helpful, but it keeps steering you toward the same questionable destination. Legitimate companies do not need to explain why a safety link looks strange in your inbox.
The fine print also says the recipient’s email address is tied to a “member household” in an outreach queue for the July 1, 2026, FMVSS §571.220 rollout. That wording sounds official, but it gives no member number, no verified AAA account link and no official AAA contact path. Even the opt-out line deserves caution. Scam emails often include unsubscribe or opt-out links to make the message look legitimate. In this case, “opt out here” could confirm your email address is active or send you to another suspicious page.
10 WAYS TO PROTECT SENIORS FROM EMAIL SCAMS
The fine print repeats the same questionable link and adds an opt-out line that could be another trap. (Kurt “CyberGuy” Knutsson)
AAA says it did not send the email
We reached out to AAA, and the organization confirmed the message did not come from them.
“AAA did not send those emails, and they could potentially be malicious,” an AAA spokesperson told CyberGuy. “We remind members to avoid clicking on suspicious links and contact us directly if they have questions or concerns.”
That confirmation makes the warning even clearer: do not click the link in the email. Go directly to AAA if you have any questions about your membership or a safety notice.
Why this fake AAA email could fool drivers
The scam feels believable because it mixes a practical safety concern with a personal tone and an official-sounding reference.
Car safety gets attention
Most people want to protect their family on the road. A seatbelt cutter or window breaker can also sound useful in a real emergency. That makes the topic believable. The issue is the email, not necessarily the idea of keeping an emergency tool in your vehicle.
Personal details can lower your guard
The email uses the recipient’s actual first and last name. Scammers often use personal details to make messages feel legitimate. A name, city, phone number or family reference can make someone hesitate before deleting an email.
Official names add fake credibility
The email mentions NHTSA and a federal motor vehicle safety standard. Those details make the message look researched. However, one official name does not make the claim true. Scammers count on people trusting the reference without checking it.
SSA IMPERSONATION SCAMS ARE GETTING MORE PERSONAL
The fake AAA-themed email uses a familiar name and safety language to make a suspicious message look trustworthy. (Jaap Arriens/NurPhoto)
How to stay safe from fake AAA emails
A few quick checks can help you avoid bad links, fake forms and phishing attempts that pretend to come from trusted brands.
1) Check the sender address
Do not rely on the display name. Click or tap the sender to see the full address. If the domain does not match the company, treat the message as suspicious.
2) Look for missing or sloppy branding
Pay attention to the overall look of the email. Missing logos, odd spacing, plain formatting or generic design can be warning signs. Also, compare the message with past emails from the same company. If the style looks off, do not click.
3) Skip links in urgent emails
Avoid clicking links in surprise emails that mention deadlines, penalties or account problems. Instead, open your browser and go directly to the company’s official website. You can also use the company’s app.
4) Use strong antivirus software
Strong antivirus software can help block malicious links, phishing pages and dangerous downloads. It can also warn you before you land on a risky site. That extra alert can stop a quick mistake from becoming a bigger problem. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com
5) Do not fill out surprise forms
A fake “readiness check” can collect more than you realize. Do not enter your name, address, phone number, vehicle details, payment information or account login through an unexpected email link.
6) Verify legal claims on your own
If an email cites a rule, law or government agency, search for it separately. Use official government websites or trusted legal sources. Do not use the link inside the message to verify the message.
7) Use a data removal service
Scam emails become more convincing when criminals know personal details about you. Data brokers and people-search sites can expose names, addresses, phone numbers and relatives. A data removal service can help reduce that exposure. It will not remove everything, but it can make you a harder target. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com
8) Report and block the sender
Mark the message as phishing or junk. Then block the sender and delete the email. If the message claims to come from AAA, contact AAA through its official website or app to report it.
9) Warn someone who may click quickly
This kind of scam can fool anyone. It may be especially risky for older relatives, new drivers or anyone who takes safety notices seriously. A quick warning could help them avoid a bad link and major headaches down the road.
Kurt’s key takeaways
This fake AAA email works because it feels personal and practical. It talks about family safety. It uses a deadline. It cites a federal rule. Then it pushes a link that does not belong in a legitimate AAA notice. That is the real lesson here. When an email makes you feel rushed, slow down. Check the sender address. Look at the link. Notice the branding. Verify the claim somewhere else. You may still decide to keep an emergency tool in your car. Just do not buy one, register one or share personal information because a suspicious email told you to act fast.
Should companies and email providers be doing more to stop scam messages like this before they ever hit your inbox? Let us know by writing to us at Cyberguy.com
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Sign up for my FREE CyberGuy Report
- Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
- Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
Copyright 2026 CyberGuy.com. All rights reserved.
-
Arizona4 minutes agoWhere Brayden Burries, Arizona players are projected to land in final NBA mock drafts
-
Arkansas11 minutes agoArkansas Looking To Do Something it Hasn’t Done To LSU Since Nick Saban Was HC
-
California14 minutes agoWhen does California high school football season start? Important dates to know in 2026
-
Colorado19 minutes agoFrom the Archives: Colorado Creamery
-
Connecticut21 minutes agoDo you work or volunteer for CT’s emergency medical services? We want to hear from you.
-
Florida24 minutes agoGet ready Fort Myers Beach. You’re getting a food truck park
-
Delaware26 minutes ago
6 Delaware trails perfect for a summer stroll
-
Georgia34 minutes agoZuckerman eyes MLB Draft after superb baseball season at Georgia Tech