The trouble is, with QR codes, you may not be able to tell the difference between a malicious code and a legitimate one until you've scanned it. But there are a few ways you can avoid fakes.