Federal officials say thieves are often using fake QR codes to misdirect payments, take customers’ money and steal other important information.