5 min read

QR Code Security: What is Quishing & How to Stay Safe

As QR codes surged in popularity, cybercriminals developed 'Quishing' (QR Phishing)—the practice of disguising malicious URLs behind legitimate-looking QR codes.

Common Attack Vectors

  • Sticker Overlays: Attackers paste fake QR stickers over legitimate parking meters, payment kiosks, or restaurant tables.
  • Phishing Emails: Emails with QR codes designed to bypass corporate email security text filters.

How to Protect Yourself

  1. Inspect Physical Codes: Check if a sticker has been pasted over the original printed surface.
  2. Preview URLs Before Opening: Smartphone camera apps display the destination domain before opening—always check that the domain matches the expected company.
  3. Use Static Browser-Side Generators: Generating static QR codes on PNGQR ensures your data never touches intermediary servers.