And get creative, they are. NordVPN told CNBC that 73% of Americans scan QR codes without verifying their authenticity. This has led to upwards of 26 million people being directed to malicious sites.