Two-factor authentication apps provide a similar flow using QR codes when enrolling a new account. The ubiquity of QR codes and the trust placed in them hasn’t been lost on scammers, however.