All attacks

QR Code Scams

Fake QR stickers that route you to scam pages.

What it is

Also called quishing — a scammer places a fake QR code over a real one on a parking meter, poster, menu, or invoice.

How it works

Scanning opens a lookalike payment or login page, so your money and details go to the attacker instead of the business.

How people get tricked

A QR code hides its destination completely. You can't inspect a link you can't read.

How to protect yourself

  • Read the URL your camera previews before you tap it.
  • Prefer the business's own app for payments.
  • Check whether the QR label looks stuck on or tampered with.
  • Never enter card details on a page reached only by scanning.

Know this now

Treat a QR code like an unknown link — because that's exactly what it is.