QR code scams are stealing from 26 million Americans — here's the ten-second check that stops them