THE STORY
The apartment that wasn't for rent.
The listing is perfect: great neighborhood, way below market rent, gorgeous photos. The "landlord" can't show it in person — they're out of town — but if you wire the deposit and first month's rent, the keys are yours. The apartment is real. The landlord is not. Scammers scrape photos from real listings, repost them cheaper, and collect deposits from people who never set foot inside.
The move: never pay for a place you haven't walked through. If you can't tour it, have someone you trust tour it. A landlord who won't show the unit doesn't have a unit.
THE SCAM
The QR code that stole your login.
Quishing — phishing via QR code — is everywhere now: stickers slapped over real codes on parking meters, fake restaurant table codes, codes in "missed delivery" flyers. You can't read a QR code with your eyes, which is exactly the point. One scan and you're on a perfect replica of your bank's login page, typing your password into someone else's server.
The move: after scanning, check the URL preview before tapping through — your phone shows it for a reason. If a parking meter's code takes you somewhere that isn't the city's payment site, stop. And never scan a QR code to "verify" an account you didn't ask to verify.
WORTH KNOWING
Your medical bill is probably wrong.
Medical billing is a mess, and the errors almost never favor you: duplicate charges, services you didn't get, codes that don't match what happened. Most people just pay. Don't. Ask for an itemized bill — not the summary, the line-by-line one — and read it. Question anything you don't recognize, in writing.
The move: request the itemized bill, dispute errors with the provider's billing office, and never pay a collections threat on a bill you haven't verified. A wrong bill you pay is just a donation.