But according to the FBI, QR codes found out in the physical world (versus the virtual one) should be approached with caution. The agency warns that cybercriminals have begun tampering with QR codes to redirect those who scan them to malicious websites. Some of these websites are said to install malware onto victims’ phones and redirect otherwise innocent payments to the criminal.
That would explain this little tidbit of news
https://www.extremetech.com/internet/331883-the-fbi-is-alarmed-by-the-spike-in-fake-qr-code-usage