The #1 way is to make sure the URL address matches the service you are seeking. Hold the camera over the code, but just hover - DON'T SCAN IT! The URL attached to the code will appear. If it doesn't, it's probably a scam - don't scan - better safe than sorry.