About a month ago we saw very similar headlines that turned out to be misleading. The FBI posted a warning about juice jacking. The FBI left off that there's no evidence it has ever happened and their post was only based on a 2019 press release by another agency stating that the hack might be possible.[1]

This article is source to a local news article.[2] The assertion that scammers could use QR codes to deliver malware is the only fact in the article without a citation. The security expert they interview is warning about phishing pages, like a sticker on a parking meter that leads to a fraudulent payment site.

It's also odd they cite only to "the FBI". These articles tend to cite either to a specific FBI spokesperson or to a specific FBI office. It's possible the journalist took the interview with the security expert and merely found something on some FBI website in order to get the better headline.

[1]: https://slate.com/technology/2023/04/free-public-phone-charg...

[2]: https://abc-7.com/news/cover-story/2023/05/01/fbi-warns-of-q...