Alert : “Quishing”: the QR Code Scam

Scammers are becoming more inventive by trapping consumers with fake QR codes. Called “quishing”, this technique consists of hijacking QR codes to redirect to malicious sites or steal your credentials.

Quishing: next-generation phishing

Quishing combines the QR code and phishing. Cybercriminals stick fake codes on posters, menus, payment terminals or emails. When scanning, the victim is redirected to a page imitating an official site to extract data or install malware.

The modus operandi

Fraudulent QR codes are placed in public places or integrated into deceptive messages (“account update”, “payment pending”). Some reproduce the logos of well-known companies to inspire confidence.
Signs: QR code on a poorly attached sticker, strange URL after scan, absence of an HTTPS certificate.

Some tips:

• 📱 Always check the address that appears before opening a QR link.
• 🚫 Never scan a code stuck over another or placed in an unusual location.
• 🔒 Use a secure reader app capable of displaying the URL before opening.
• 💳 Never enter your banking credentials after a scan.
• 📢 Report suspicious QR codes to local authorities or on internet-signalement.gouv.fr.

Conclusion

QR codes are not always harmless: be cautious before each scan! If in doubt, close the page and report the attempt on actionfraud.police.uk.
To go further:
Key points to follow to avoid most online scams!

Written by : René Ronse
Methodology : Our alert articles are based on regular monitoring of national reporting platforms, feedback from victims, and statements issued by relevant authorities.
About the author : René Ronse, manager of ArnaqueOuFiable.com. Expert in consumer cybersecurity, specialist in detecting online fraud, product transparency, and digital compliance. He has over 20 years of experience analyzing hidden subscription mechanisms, unreadable terms and conditions, aggressive sales tactics, and deceptive commercial practices on the web.
Sources : consumer.ftc.gov | microsoft.com | paloaltonetworks.com | uspis.gov
Last updated : 15 November 2025.
This article is also available in : Français - Deutsch - Español - Italiano - Nederlands - Português